]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
netfilter: flowtable: ensure sufficient headroom in xmit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 30 Apr 2026 14:49:48 +0000 (16:49 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 30 Apr 2026 15:59:01 +0000 (17:59 +0200)
commitef4f741e8627512cb8c82f59a1fc7aacd854aadf
tree85a0ddc55a8a03e72c6694e0e20b9d980380b886
parent952e121c96137c73bd3e59bb20a93ef659376947
netfilter: flowtable: ensure sufficient headroom in xmit path

Check for headroom and call skb_expand_head() like in the IP output
path to ensure there is sufficient headroom for the mac header when
forwarding this packet as suggested by sashiko.

Fixes: b5964aac51e0 ("netfilter: flowtable: consolidate xmit path")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_flow_table_ip.c