Re: [PATCH net v4] net: Fix Hole-196 vulnerability by dropping unicast ARP/IP in L2 BMC
From: Johannes Berg
Date: Fri Oct 30 2026 - 18:23:09 EST
On Fri, 2026-10-30 at 07:20 +0200, Julian Anastasov wrote:
>
> May be DROP_UNICAST_IN_L2_MULTICAST should drop also
> the GARP packets. Why should the GARP packets to be more
> privileged than the other broadcast requests?
I've been quiet on this ... but in particular for this, why would you
not just use the extra knob we already have?!
johannes