]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
arp: do not assume dev_hard_header() does not change skb->head
authorEric Dumazet <edumazet@google.com>
Wed, 7 Jan 2026 21:22:50 +0000 (21:22 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 17 Jan 2026 15:31:25 +0000 (16:31 +0100)
commitdd6ccec088adff4bdf33e2b2dd102df20a7128fa
tree8e42d27c632fdc85377ca0437b97c0925a227303
parentde77d2cd178afefbaa39f71e154b0ec523b8d10b
arp: do not assume dev_hard_header() does not change skb->head

[ Upstream commit c92510f5e3f82ba11c95991824a41e59a9c5ed81 ]

arp_create() is the only dev_hard_header() caller
making assumption about skb->head being unchanged.

A recent commit broke this assumption.

Initialize @arp pointer after dev_hard_header() call.

Fixes: db5b4e39c4e6 ("ip6_gre: make ip6gre_header() robust")
Reported-by: syzbot+58b44a770a1585795351@syzkaller.appspotmail.com
Signed-off-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20260107212250.384552-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/ipv4/arp.c