From: Toshiaki Makita <[email protected]> Date: Tue, 17 Apr 2018 18:46:14 +0900
> Syzkaller spotted an old bug which leads to reading skb beyond tail by 4
> bytes on vlan tagged packets.
> This is caused because skb_vlan_tagged_multi() did not check
> skb_headlen.
...
> Fixes: 58e998c6d239 ("offloading: Force software GSO for multiple vlan tags.")
> Reported-and-tested-by: [email protected]
> Signed-off-by: Toshiaki Makita <[email protected]>
Applied and queued up for -stable, thank you.
