Merge branch 'tcp-destroy-tcp-ao-tcp-md5-keys-in-sk_destruct'

Browse source

Dmitry Safonov says:

====================
tcp: Destroy TCP-AO, TCP-MD5 keys in .sk_destruct()

On one side a minor/cosmetic issue, especially nowadays when
TCP-AO/TCP-MD5 signature verification failures aren't logged to dmesg.

Yet, I think worth addressing for two reasons:
- unsigned RST gets ignored by the peer and the connection is alive for
  longer (keep-alive interval)
- netstat counters increase and trace events report that trusted BGP peer
  is sending unsigned/incorrectly signed segments, which can ring alarm
  on monitoring.
====================

Link: https://patch.msgid.link/20250909-b4-tcp-ao-md5-rst-finwait2-v5-0-9ffaaaf8b236@arista.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

...

This commit is contained in:

Jakub Kicinski 2025-09-11 19:05:59 -07:00

parent bf2650d059 51e547e8c8

commit 999337afa5

7 changed files with 45 additions and 45 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

include/net/tcp.h

View file

1

include/net/tcp_ao.h

View file

16

net/ipv4/tcp.c

View file

5

net/ipv4/tcp_ao.c

View file

37

net/ipv4/tcp_ipv4.c

View file

19

net/ipv4/tcp_minisocks.c

View file

8

net/ipv6/tcp_ipv6.c

View file