On 8/12/19 5:36 AM, Eric Dumazet wrote: > David missed that commit 8cb081746c03 ("netlink: make validation > more configurable for future strictness") has renamed nlmsg_parse()
I think the root cause is nlmsg_parse() calling __nla_parse and not __nlmsg_parse. Users of nlmsg_parse are missing the header validation.