Re: [PATCH net] gtp: Require 'CAP_NET_ADMIN' when joining the gtp multicast group

From: Anil Kaushik

Date: Fri Oct 23 2026 - 03:41:50 EST


On Fri, Oct 23, 2026 at 06:58:02AM +0000, netdev-bot+sashiko@xxxxxxxxxx wrote:
> - [Medium] After this patch, the multicast group and GETPDP carry the
> same PDP-context data but are guarded by different checks.
[...]
> Could the commit message say that the multicast check is still weaker than
> the GETPDP check?

Right, it should. v2 says it: the group check is still weaker than the
one on GETPDP, as genetlink has no multicast group flag for the initial
user namespace, and this fix blocks the unprivileged users.

pw-bot: cr