Matteo Croce <mcroce@xxxxxxxxxx> wrote: > As in commit c543cb4a5f07 ("ipv4: ensure rcu_read_lock() in ipv4_link_failure()") > and commit 3e72dfdf8227 ("ipv4: ensure rcu_read_lock() in cipso_v4_error()"), > __ip_options_compile() must be called under rcu protection. This is not needed, all netfilter hooks run with rcu_read_lock held.