projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e33b432) | patch
netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded
authorLeonardo Bras <leonardo@linux.ibm.com>
Sat, 31 Aug 2019 04:40:33 +0000 (01:40 -0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 2 Sep 2019 21:19:27 +0000 (23:19 +0200)
commit48bd0d68cd4b849c0bb99dc1fb01b013ad4aa942
treec17cf7f083d4a90cc4f921cb9daee0f4ade5fc51tree | snapshot
parente33b4325e60e146c2317a8b548cbd633239ff83bcommit | diff
netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded

A kernel panic can happen if a host has disabled IPv6 on boot and have to
process guest packets (coming from a bridge) using it's ip6tables.

IPv6 packets need to be dropped if the IPv6 module is not loaded, and the
host ip6tables will be used.

Signed-off-by: Leonardo Bras <leonardo@linux.ibm.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/bridge/br_netfilter_hooks.c diff | blob | history
Domain: System / Kernel;