Re: [PATCH net v4] net: Fix Hole-196 vulnerability by dropping unicast ARP/IP in L2 BMC

From: Johannes Berg

Date: Fri Oct 30 2026 - 18:23:09 EST


On Fri, 2026-10-30 at 07:20 +0200, Julian Anastasov wrote:
>
> May be DROP_UNICAST_IN_L2_MULTICAST should drop also
> the GARP packets. Why should the GARP packets to be more
> privileged than the other broadcast requests?

I've been quiet on this ... but in particular for this, why would you
not just use the extra knob we already have?!

johannes