diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2026-06-26 13:24:49 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2026-06-30 06:37:11 +0200 |
| commit | e5e24a365a5e024efef63cc49abb345fbd4852c5 (patch) | |
| tree | cb7740e888679964b1b0501ca4d3a91021cc4b74 /rust | |
| parent | 7cd9103283b26b917360ec99d7d2f2d761bcf1ab (diff) | |
netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
tc ingress and openvswitch do not guarantee routing information to be
available. These subsystems use the conntrack helper infrastructure, and
the SIP helper relies on the skb_dst() to be present if
sip_external_media is set to 1 (which is disabled by default as a module
parameter).
This effectively disables the sip_external_media toggle for these
subsystems without resulting in a crash.
Fixes: cae3a2627520 ("openvswitch: Allow attaching helpers to ct action")
Fixes: b57dc7c13ea9 ("net/sched: Introduce action ct")
Cc: stable@vger.kernel.org
Reported-by: Ren Wei <n05ec@lzu.edu.cn>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'rust')
0 files changed, 0 insertions, 0 deletions