]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
bpf: tcp: Fix type confusion in bpf_skc_to_tcp6_sock().
authorKuniyuki Iwashima <kuniyu@google.com>
Mon, 4 May 2026 21:04:52 +0000 (21:04 +0000)
committerMartin KaFai Lau <martin.lau@kernel.org>
Fri, 8 May 2026 18:38:10 +0000 (11:38 -0700)
commit843064b0a77eed3d6d63ffc53aeaa359672b4e12
tree01444c3d6f6c45aca6dd30a8ea85efa3bf723d13
parentdecb84b8383ab7acff94db208ef7ed19f9c55e1f
bpf: tcp: Fix type confusion in bpf_skc_to_tcp6_sock().

bpf_skc_to_tcp6_sock() only checks if sk->sk_protocol is IPPROTO_TCP
and sk->sk_family is AF_INET6, but RAW socket can bypass it:

  socket(AF_INET6, SOCK_RAW, IPPROTO_TCP)

Let's check sk->sk_type too.

Fixes: af7ec1383361 ("bpf: Add bpf_skc_to_tcp6_sock() helper")
Signed-off-by: Kuniyuki Iwashima <kuniyu@google.com>
Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org>
Link: https://patch.msgid.link/20260504210610.180150-6-kuniyu@google.com
net/core/filter.c