]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_flow_table_ip: reset mac header before vlan push
authorEric Woudstra <ericwouds@gmail.com>
Tue, 10 Mar 2026 14:39:33 +0000 (15:39 +0100)
committerFlorian Westphal <fw@strlen.de>
Fri, 13 Mar 2026 14:31:15 +0000 (15:31 +0100)
commita3aca98aec9a278ee56da4f8013bfa1dd1a1c298
tree9a0ee02e1e0381f9d4e8c536706555275e8ac8c5
parent598adea720b97572c7028635cb1c59b3684e128c
netfilter: nf_flow_table_ip: reset mac header before vlan push

With double vlan tagged packets in the fastpath, getting the error:

skb_vlan_push got skb with skb->data not at mac header (offset 18)

Call skb_reset_mac_header() before calling skb_vlan_push().

Fixes: c653d5a78f34 ("netfilter: flowtable: inline vlan encapsulation in xmit path")
Signed-off-by: Eric Woudstra <ericwouds@gmail.com>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nf_flow_table_ip.c