On Mon, Nov 22, 2021 at 11:33:13AM +0100, Nicolas Dichtel wrote: > When there is no policy configured on the system, the default policy is > checked in xfrm_route_forward. However, it was done with the wrong > direction (XFRM_POLICY_FWD instead of XFRM_POLICY_OUT). > The default policy for XFRM_POLICY_FWD was checked just before, with a call > to xfrm[46]_policy_check(). > > CC: stable@xxxxxxxxxxxxxxx > Fixes: 2d151d39073a ("xfrm: Add possibility to set the default to block if we have no policy") > Signed-off-by: Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> Applied, thanks Nicolas!