Currently, 4.19 and earlier stable kernels contain a security fix that is not fully IPv6 standard compliant.
This patchset backports IPv6 defrag fixes from 5.1rc that restore standard-compliance. Original 5.1 patchet: https://patchwork.ozlabs.org/cover/1029418/ John Masinter (captwiggum), could you, please, confirm that this patchset fixes TAHI tests? Peter Oskolkov (3): net: IP defrag: encapsulate rbtree defrag code into callable functions net: IP6 defrag: use rbtrees for IPv6 defrag net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c include/net/inet_frag.h | 16 +- include/net/ipv6_frag.h | 11 +- net/ipv4/inet_fragment.c | 293 ++++++++++++++++++++++++ net/ipv4/ip_fragment.c | 290 +++-------------------- net/ipv6/netfilter/nf_conntrack_reasm.c | 260 ++++++--------------- net/ipv6/reassembly.c | 233 +++++-------------- 6 files changed, 477 insertions(+), 626 deletions(-) -- 2.21.0.392.gf8f6787159e-goog
