MT#55283 kernel-module: scrub forwarded skb metadata

Closes #2140

Change-Id: I89c8a75d79c1c16ece6ca98ae2bbd5f615cc3ca2
(cherry picked from commit 7051631097)
mr26.1
Idan Freiberg 2 weeks ago committed by Richard Fuchs
parent 248cd24e69
commit 81f98fff75

@ -5571,6 +5571,11 @@ static int send_proxy_packet(struct sk_buff *skb, const struct re_address *src,
goto drop;
}
/* This skb was received from the network but is now being reinjected as
* a new locally generated packet. Drop inherited routing, conntrack, and
* netfilter metadata before handing it to the IP output path. */
skb_scrub_packet(skb, true);
switch (src->family) {
case AF_INET:
return send_proxy_packet4(skb, src, dst, tos, net);

Loading…
Cancel
Save