]> exis.tech > repos - linux.git/commit
ip6_vti: set netns_immutable on the fallback device.
authorEric Dumazet <edumazet@google.com>
Mon, 8 Jun 2026 15:59:18 +0000 (15:59 +0000)
committerJakub Kicinski <kuba@kernel.org>
Wed, 10 Jun 2026 01:15:47 +0000 (18:15 -0700)
commitd289d5307762d1838aaece22c6b6fcad9e8865f9
tree2c008ad8dcfc38cd1c966da1512feb37083df696
parentf8373d7090b745728de66308deeecc67e8d319ce
ip6_vti: set netns_immutable on the fallback device.

john1988 and Noam Rathaus reported that vti6_init_net() does not set the
netns_immutable flag on the per-netns fallback tunnel device (ip6_vti0).

Other similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel)
correctly set this flag during their fallback device initialization to
prevent them from being moved to another network namespace.

Fixes: 61220ab34948 ("vti6: Enable namespace changing")
Reported-by: Noam Rathaus <noamr@ssd-disclosure.com>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Steffen Klassert <steffen.klassert@secunet.com>
Reviewed-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Link: https://patch.msgid.link/20260608155918.787644-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
net/ipv6/ip6_vti.c