]> Gentwo Git Trees - linux/.git/commit
xfrm: Prevent locally generated packets from direct output in tunnel mode
authorJianbo Liu <jianbol@nvidia.com>
Wed, 29 Oct 2025 09:50:25 +0000 (11:50 +0200)
committerSteffen Klassert <steffen.klassert@secunet.com>
Thu, 30 Oct 2025 10:52:38 +0000 (11:52 +0100)
commit59630e2ccd728703cc826e3a3515d70f8c7a766c
tree05baee508fdfdf1df8a4e38b8a2b1a6ed149245d
parent61fafbee6cfed283c02a320896089f658fa67e56
xfrm: Prevent locally generated packets from direct output in tunnel mode

Add a check to ensure locally generated packets (skb->sk != NULL) do
not use direct output in tunnel mode, as these packets require proper
L2 header setup that is handled by the normal XFRM processing path.

Fixes: 5eddd76ec2fd ("xfrm: fix tunnel mode TX datapath in packet offload mode")
Signed-off-by: Jianbo Liu <jianbol@nvidia.com>
Reviewed-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/xfrm/xfrm_output.c