From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f50.google.com (mail-wm1-f50.google.com [209.85.128.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 36521267B07 for ; Fri, 6 Feb 2026 20:06:40 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.50 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1770408400; cv=none; b=AG5+dxXqr+aLdzPZW697j+EThkGHcrrXhzI5QW4xNFHC8M/Esgtod6AXU5X24z3OM5zdQ2Gbu+wf+m8z7cMu3WmfbAGnxaMuCqR+GWTLKugN01vgF0fAt6vNA1iRU5yB/U5bJsk73xNuiDF9gx4FUpprcP7vCup+cLYes5BZlW0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1770408400; c=relaxed/simple; bh=ULUa21GO2iklmjg31M9THX5fuA3oUFiMhKC3xON5Faw=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=CNa77Nj3OAEFx3w1939BxUq0XNtJkBgI8QNkN5l7Os3ZICeK4VNGf/WPGczCQoFn6BiNyRs5L/aiYc5G29LSSjCAbxlgH7/1NMGZeaubyYDpbBzuHWpbQ29BY6vfpWaJcGLzCkg9XpoLaYD/8pLPzcebhywZiOQtVmHxsWq41uE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=openvpn.net; spf=pass smtp.mailfrom=openvpn.com; dkim=pass (2048-bit key) header.d=openvpn.net header.i=@openvpn.net header.b=BNJVKLcB; arc=none smtp.client-ip=209.85.128.50 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=openvpn.net Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=openvpn.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=openvpn.net header.i=@openvpn.net header.b="BNJVKLcB" Received: by mail-wm1-f50.google.com with SMTP id 5b1f17b1804b1-4801eb2c0a5so23461005e9.3 for ; Fri, 06 Feb 2026 12:06:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=openvpn.net; s=google; t=1770408398; x=1771013198; darn=vger.kernel.org; h=content-transfer-encoding:in-reply-to:organization:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:from:to:cc:subject:date:message-id:reply-to; bh=PaNaMffxjIXphx0AHXkWa5X4Z3VPaJLNxZNxYe6XY2k=; b=BNJVKLcBtiMgOQoZ6xdGQSiCI9uDDjuiCWxEd/kMdeAhZnd1VFDF2zGp2xHkxnbGKJ Qrq7hncj0fMk1rSZ//hD8jdJEDXFXa4qWOHVQJqZrobl3MbqT24hclybLQdF1vOdeg5I g4BXryFi5N8e5vFgAXBEo+7CSULqbBDR9GGiRudsFz91J1SNZF++elJ1chWD4xJCxBn/ B9FlWFtqCJmkzGB2lDHSiLdkyIFPDD9srFSLsZmJHUimx8Hz/QSJk7t1PilfhK+SUymQ sFinoZNg0m/xwLUrnn/XQsWDR17+DKGmJS3euhQxz8xE5yMYVulLGib9E1pDMTJtU53d tDSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1770408398; x=1771013198; h=content-transfer-encoding:in-reply-to:organization:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=PaNaMffxjIXphx0AHXkWa5X4Z3VPaJLNxZNxYe6XY2k=; b=FW3gc9YXHyAIp0/iGEotiKGUvNBSoWl4iuJMylhYlfFsiSX9L9DpupUz8xMUKPDkJY 7JVc569FGEj3xuhAzI39kmlkUtwzQPBjLB+EnwunRhfPsv4GbfoM3xb1zt15R+wit/aO WFgNkKIU1n2OhUePsiDUzeSX4/qScu5YXestCFzvtwuC6PGvG12QsbbjIQyXxLdBqoTX x+2BvefWeb/aUi59NqfUuFTupQdEsEzQ6cd71oZ4fo7vz2ncqnWQfTpH3UkweL4EkyB9 Vm4ewktfLru2MbkKAW+Q4z5lbL3eUMcxqN0dUCG+0n19WUXZIKD7h+2xmrp9kZfj/7LJ 4J3Q== X-Forwarded-Encrypted: i=1; AJvYcCVRl4MhRTwO0AwROqZxptRjXHetJhNTXnG4ex7WsTnn+npDDqxXYO8mXiEVZ1t+GvH4Jw+LQiGDE2dPBe8=@vger.kernel.org X-Gm-Message-State: AOJu0YyCFQYQDr3tjJNotoXZ2seX0fnkF8YbPWHuAkX+zD4v+/qmXkid YK9FdGqhzI1XofEpk05N/J+1OXFuEv3KYmsCfe22mvDepcugy4vrlsQ42pPbiAdzOCoAY4/Th8y +I48tQXvdFE0/PnhDSfk4XCS85L05PRUnuGIO73NqtnodTo53P3oEmOT9FFs= X-Gm-Gg: AZuq6aL5/5iNL00gBEGJYMJ57JVVl4pYNQeZbl9pvcQaboYUV+KJd6hBJD6cgcm7l4x vVniUEcQDsc53wRV+kKHuWsYDLutTwJZRdqqOEK3UVYVUDRCGRrBtgXnVRJ+RWcvhOh3/6PbiXj yoxKWucncwU7fwsDGMJlcNXyemBO6/QBEN0TCU1sFDai+I+LoTW1kr5NuLbfxIIR6MZoOIP1W3s +fB2abm1N0d+oaIomk9tazQC8pM1UBsdjiZoC+XEfom2Z+Yoo7qdNRCNpg47Ha8aEvhTY8y5Ph+ 39Q6nTFEXaHgdoutrKINBHF+NT8OooUtnNJ9XFHHgYmZs8jzaSnhxI79vesiuj5gc2sJU3z2ZLH oWT97EYqyBfgwxn88en3piTsoE1hVbeRRbcoFYD0asbfSM6afcRuBYkTU2T+c8DQcpPlj/WcoJR 8SzggnJ+VKbNSdz9ANxnAOB4tPmGxoOfHHJzmO94KKMUZJ5yzBIg== X-Received: by 2002:a05:600c:34c7:b0:47e:e414:b915 with SMTP id 5b1f17b1804b1-483201dc5afmr58864775e9.2.1770408398550; Fri, 06 Feb 2026 12:06:38 -0800 (PST) Received: from ?IPV6:2001:67c:2fbc:1:c364:c475:2c68:30fd? ([2001:67c:2fbc:1:c364:c475:2c68:30fd]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-436296b25d5sm8626759f8f.2.2026.02.06.12.06.37 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 06 Feb 2026 12:06:37 -0800 (PST) Message-ID: <9d240ea8-7e55-4be2-b99b-3f2657c5f8c8@openvpn.net> Date: Fri, 6 Feb 2026 21:06:35 +0100 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Bug#1126499: linux-image-6.17.13+deb14-amd64: ovpn NULL pointer dereference and lockup under heavy load To: Salvatore Bonaccorso Cc: Jon Penn , Sabrina Dubroca , 1126499@bugs.debian.org, Andrew Lunn , "David S. Miller" , Eric Dumazet , Jakub Kicinski , Paolo Abeni , netdev@vger.kernel.org, linux-kernel@vger.kernel.org, Ralf Lici References: <4be2e796-77ba-4864-a288-e6edf3b7de12@bentonvillek12.org> <176996279620.3109699.15382994681575380467@eldamar.lan> Content-Language: en-US From: Antonio Quartulli Autocrypt: addr=antonio@openvpn.net; keydata= xsFNBFN3k+ABEADEvXdJZVUfqxGOKByfkExNpKzFzAwHYjhOb3MTlzSLlVKLRIHxe/Etj13I X6tcViNYiIiJxmeHAH7FUj/yAISW56lynAEt7OdkGpZf3HGXRQz1Xi0PWuUINa4QW+ipaKmv voR4b1wZQ9cZ787KLmu10VF1duHW/IewDx9GUQIzChqQVI3lSHRCo90Z/NQ75ZL/rbR3UHB+ EWLIh8Lz1cdE47VaVyX6f0yr3Itx0ZuyIWPrctlHwV5bUdA4JnyY3QvJh4yJPYh9I69HZWsj qplU2WxEfM6+OlaM9iKOUhVxjpkFXheD57EGdVkuG0YhizVF4p9MKGB42D70pfS3EiYdTaKf WzbiFUunOHLJ4hyAi75d4ugxU02DsUjw/0t0kfHtj2V0x1169Hp/NTW1jkqgPWtIsjn+dkde dG9mXk5QrvbpihgpcmNbtloSdkRZ02lsxkUzpG8U64X8WK6LuRz7BZ7p5t/WzaR/hCdOiQCG RNup2UTNDrZpWxpwadXMnJsyJcVX4BAKaWGsm5IQyXXBUdguHVa7To/JIBlhjlKackKWoBnI Ojl8VQhVLcD551iJ61w4aQH6bHxdTjz65MT2OrW/mFZbtIwWSeif6axrYpVCyERIDEKrX5AV rOmGEaUGsCd16FueoaM2Hf96BH3SI3/q2w+g058RedLOZVZtyQARAQABzSdBbnRvbmlvIFF1 YXJ0dWxsaSA8YW50b25pb0BvcGVudnBuLm5ldD7Cwa0EEwEIAFcCGwMFCwkIBwMFFQoJCAsF FgIDAQACHgECF4AYGGhrcHM6Ly9rZXlzLm9wZW5wZ3Aub3JnFiEEyr2hKCAXwmchmIXHSPDM to9Z0UwFAmj3PEoFCShLq0sACgkQSPDMto9Z0Uw7/BAAtMIP/wzpiYn+Di0TWwNAEqDUcGnv JQ0CrFu8WzdtNo1TvEh5oqSLyO0xWaiGeDcC5bQOAAumN+0Aa8NPqhCH5O0eKslzP69cz247 4Yfx/lpNejqDaeu0Gh3kybbT84M+yFJWwbjeT9zPwfSDyoyDfBHbSb46FGoTqXR+YBp9t/CV MuXryL/vn+RmH/R8+s1T/wF2cXpQr3uXuV3e0ccKw33CugxQJsS4pqbaCmYKilLmwNBSHNrD 77BnGkml15Hd6XFFvbmxIAJVnH9ZceLln1DpjVvg5pg4BRPeWiZwf5/7UwOw+tksSIoNllUH 4z/VgsIcRw/5QyjVpUQLPY5kdr57ywieSh0agJ160fP8s/okUqqn6UQV5fE8/HBIloIbf7yW LDE5mYqmcxDzTUqdstKZzIi91QRVLgXgoi7WOeLF2WjITCWd1YcrmX/SEPnOWkK0oNr5ykb0 4XuLLzK9l9MzFkwTOwOWiQNFcxXZ9CdW2sC7G+uxhQ+x8AQW+WoLkKJF2vbREMjLqctPU1A4 557A9xZBI2xg0xWVaaOWr4eyd4vpfKY3VFlxLT7zMy/IKtsm6N01ekXwui1Zb9oWtsP3OaRx gZ5bmW8qwhk5XnNgbSfjehOO7EphsyCBgKkQZtjFyQqQZaDdQ+GTo1t6xnfBB6/TwS7pNpf2 ZvLulFbOOARoRsrsEgorBgEEAZdVAQUBAQdAyD3gsxqcxX256G9lLJ+NFhi7BQpchUat6mSA Pb+1yCQDAQgHwsF8BBgBCAAmFiEEyr2hKCAXwmchmIXHSPDMto9Z0UwFAmhGyuwCGwwFCQHh M4AACgkQSPDMto9Z0UwymQ//Z1tIZaaJM7CH8npDlnbzrI938cE0Ry5acrw2EWd0aGGUaW+L +lu6N1kTOVZiU6rnkjib+9FXwW1LhAUiLYYn2OlVpVT1kBSniR00L3oE62UpFgZbD3hr5S/i o4+ZB8fffAfD6llKxbRWNED9UrfiVh02EgYYS2Jmy+V4BT8+KJGyxNFv0LFSJjwb8zQZ5vVZ 5FPYsSQ5JQdAzYNmA99cbLlNpyHbzbHr2bXr4t8b/ri04Swn+Kzpo+811W/rkq/mI1v+yM/6 o7+0586l1MQ9m0LMj6vLXrBDN0ioGa1/97GhP8LtLE4Hlh+S8jPSDn+8BkSB4+4IpijQKtrA qVTaiP4v3Y6faqJArPch5FHKgu+rn7bMqoipKjVzKGUXroGoUHwjzeaOnnnwYMvkDIwHiAW6 XgzE5ZREn2ffEsSnVPzA4QkjP+QX/5RZoH1983gb7eOXbP/KQhiH6SO1UBAmgPKSKQGRAYYt cJX1bHWYQHTtefBGoKrbkzksL5ZvTdNRcC44/Z5u4yhNmAsq4K6wDQu0JbADv69J56jPaCM+ gg9NWuSR3XNVOui/0JRVx4qd3SnsnwsuF5xy+fD0ocYBLuksVmHa4FsJq9113Or2fM+10t1m yBIZwIDEBLu9zxGUYLenla/gHde+UnSs+mycN0sya9ahOBTG/57k7w/aQLc= Organization: OpenVPN Inc. In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hi Salvatore, On 06/02/2026 19:19, Salvatore Bonaccorso wrote: > Hi Antonio, > > On Mon, Feb 02, 2026 at 09:26:16AM +0100, Antonio Quartulli wrote: >> On 01/02/2026 17:23, Salvatore Bonaccorso wrote: >>> Control: forwarded -1 https://lore.kernel.org/netdev/176996279620.3109699.15382994681575380467@eldamar.lan >>> >>> Hi Antonio and all, >>> >>> In Debian we got the following report from Jon Penn using ovpn, >>> reported at https://bugs.debian.org/1126499 >> >> Hi all, >> >> Thanks a lot for the report! >> We have a fix for this issue in our pipe already - I'll forward it to net >> ASAP. > > Do you have patch already which you would appreciate if Jon Penn could > test and maybe add a Tested-by or is that not needed at this point as > things setting already? This is the patch: https://patchwork.openvpn.net/project/openvpn2/patch/20260202132309.567382-1-ralf@mandelbit.com/ Jon can definitely test the patch and give us his feedback. However, being this part of the code very critical for socket handling, I am still spending some time with Ralf and Sabrina to make sure we are not introducing any subtle bug/side effect. In any case, please feel free to test so we can confirm that the problem you reported is truly the same as the one we were already investigating. Thanks a lot. Regards, -- Antonio Quartulli OpenVPN Inc.