[PATCH v5.10.y 0/3] Backport fixes for CVE-2025-40149

From: Keerthana K

Date: Mon Jan 12 2026 - 01:33:47 EST


Following commits are pre-requisite for the commit c65f27b9c
- 1dbf1d590 (net: Add locking to protect skb->dev access in ip_output)
- 719a402cf (net: netdevice: Add operation ndo_sk_get_lower_dev)

Kuniyuki Iwashima (1):
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

Sharath Chandra Vurukala (1):
net: Add locking to protect skb->dev access in ip_output

Tariq Toukan (1):
net: netdevice: Add operation ndo_sk_get_lower_dev

include/linux/netdevice.h | 4 ++++
include/net/dst.h | 12 ++++++++++++
net/core/dev.c | 33 +++++++++++++++++++++++++++++++++
net/ipv4/ip_output.c | 16 +++++++++++-----
net/tls/tls_device.c | 18 ++++++++++--------
5 files changed, 70 insertions(+), 13 deletions(-)

--
2.43.7