Re: [PATCH net] icmp: fix NULL pointer dereference in icmp_tag_validation()
From: patchwork-bot+netdevbpf
Date: Thu Mar 19 2026 - 12:40:29 EST
Hello:
This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Wed, 18 Mar 2026 21:06:01 +0800 you wrote:
> From: Weiming Shi <bestswngs@xxxxxxxxx>
>
> icmp_tag_validation() unconditionally dereferences the result of
> rcu_dereference(inet_protos[proto]) without checking for NULL.
> The inet_protos[] array is sparse -- only about 15 of 256 protocol
> numbers have registered handlers. When ip_no_pmtu_disc is set to 3
> (hardened PMTU mode) and the kernel receives an ICMP Fragmentation
> Needed error with a quoted inner IP header containing an unregistered
> protocol number, the NULL dereference causes a kernel panic in
> softirq context.
>
> [...]
Here is the summary with links:
- [net] icmp: fix NULL pointer dereference in icmp_tag_validation()
https://git.kernel.org/netdev/net/c/614aefe56af8
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html