Re: [PATCH net v8 0/2] ipv6: flowlabel: per-netns budget for unprivileged callers
From: patchwork-bot+netdevbpf
Date: Fri May 08 2026 - 18:11:23 EST
Hello:
This series was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Wed, 6 May 2026 16:24:14 +0800 you wrote:
> From: Maoyi Xie <maoyi.xie@xxxxxxxxxx>
>
> This series fixes the cross-tenant DoS in net/ipv6/ip6_flowlabel.c.
> v1 through v6 were single-patch postings, each in its own thread.
> v6 review pointed out that the existing fl_size read in
> mem_check() and the corresponding write in fl_intern() are not in
> the same critical section. v7 split the work into 2 patches.
>
> [...]
Here is the summary with links:
- [net,v8,1/2] ipv6: flowlabel: take ip6_fl_lock across mem_check and fl_intern
https://git.kernel.org/netdev/net/c/7ce5556f255a
- [net,v8,2/2] ipv6: flowlabel: enforce per-netns limit for unprivileged callers
https://git.kernel.org/netdev/net/c/e68eadffb724
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html