From: Haishuang Yan <[email protected]> Date: Fri, 26 Jul 2019 00:40:17 +0800
> ip4ip6/ip6ip6 tunnels run iptunnel_handle_offloads on xmit which
> can cause a possible use-after-free accessing iph/ipv6h pointer
> since the packet will be 'uncloned' running pskb_expand_head if
> it is a cloned gso skb.
>
> Fixes: 0e9a709560db ("ip6_tunnel, ip6_gre: fix setting of DSCP on
> encapsulated packets")
> Signed-off-by: Haishuang Yan <[email protected]>
Applied and queued up for -stable, thanks.
