On Mon, Jun 06, 2011 at 02:41:10AM +0200, pablo@xxxxxxxxxxxxx wrote: > From: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx> > > The IPv6 header is not zeroed out in alloc_skb so we must initialize > it properly unless we want to see IPv6 packets with random TOS fields > floating around. The current implementation resets the flow label > but this could be changed if deemed necessary. > > We stumbled upon this issue when trying to apply a mangle rule to > the RST packet generated by the REJECT target module. > > The following Linux kernels are affected: <= 2.6.38.8 > > Cc: stable@xxxxxxxxxx > Signed-off-by: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx> > Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> > (cherry picked from commit 4319cc0cf5bb894b7368008cdf6dd20eb8868018) So, what kernel(s) are you wanting this to be applied to? Should I just take the upstream 4319cc0cf5bb894b7368008cdf6dd20eb8868018, or does your backport do something different here? Same goes for the 2/2 patch, please be more specific. thanks, greg k-h -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html