Nicolas Dichtel 9c1154f395 xfrm: fix dflt policy check when there is no policy configured ...

commit ec3bb89081 upstream.

When there is no policy configured on the system, the default policy is
checked in xfrm_route_forward. However, it was done with the wrong
direction (XFRM_POLICY_FWD instead of XFRM_POLICY_OUT).
The default policy for XFRM_POLICY_FWD was checked just before, with a call
to xfrm[46]_policy_check().

CC: stable@vger.kernel.org
Fixes: 2d151d3907 ("xfrm: Add possibility to set the default to block if we have no policy")
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-01-27 11:05:14 +01:00

..

acpi

ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions

2022-01-27 11:04:49 +01:00

asm-generic

Merge tag 'asm-generic-fixes-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic

2021-10-08 11:57:54 -07:00

clocksource

drivers: hv: Decouple Hyper-V clock/timer code from VMbus drivers

2021-07-19 09:24:28 +00:00

crypto

Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

2021-08-30 12:57:10 -07:00

drm

drm/ttm: remove ttm_bo_vm_insert_huge()

2021-11-18 19:17:08 +01:00

dt-bindings

Merge tag 'linux-watchdog-5.15-rc1' of git://www.linux-watchdog.org/linux-watchdog

2021-09-07 13:52:46 -07:00

keys

Merge tag 'integrity-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2021-05-01 15:32:18 -07:00

kunit

kunit: fix kernel-doc warnings due to mismatched arg names

2021-10-06 17:54:07 -06:00

kvm

KVM: arm64: Fix PMU probe ordering

2021-09-20 12:43:34 +01:00

linux

icmp: ICMPV6: Examine invoking packet for Segment Route Headers.

2022-01-27 11:05:05 +01:00

math-emu

math-emu: Fix fall-through warning

2021-07-13 13:57:44 -05:00

media

media: cec: fix a deadlock situation

2022-01-27 11:02:53 +01:00

memory

memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode

2021-11-18 19:16:01 +01:00

misc

…

net

xfrm: fix dflt policy check when there is no policy configured

2022-01-27 11:05:14 +01:00

pcmcia

…

ras

…

rdma

RDMA/netlink: Add __maybe_unused to static inline in C file

2021-11-25 09:49:07 +01:00

scsi

scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run

2021-11-18 19:15:51 +01:00

soc

net: dsa: tag_ocelot_8021q: break circular dependency with ocelot switch lib

2021-10-12 17:35:18 -07:00

sound

ALSA: hda: Fix potential deadlock at codec unbinding

2022-01-27 11:04:05 +01:00

target

scsi: target: Fix ordered tag handling

2021-11-25 09:48:29 +01:00

trace

cgroup: Trace event cgroup id fields should be u64

2022-01-27 11:03:23 +01:00

uapi

xfrm: rate limit SA mapping change message to user space

2022-01-27 11:04:49 +01:00

vdso

time64.h: Consolidated PSEC_PER_SEC definition

2021-04-06 16:32:17 -07:00

video

gpu: ipu-v3: Add Rec.709 limited range support to DP

2021-05-10 17:20:29 +02:00

xen

xen/console: harden hvc_xen against event channel storms

2021-12-22 09:32:52 +01:00