)]}'
{
  "commit": "55acfaa0d8192e080417075465aaffd1f75df1a9",
  "tree": "dcf59f18c9464886e4c46d979c916e5878e73866",
  "parents": [
    "55795824e94d04cecd24699f2701c55557973db5"
  ],
  "author": {
    "name": "Yang Yang",
    "email": "n05ec@lzu.edu.cn",
    "time": "Thu Mar 26 03:44:41 2026 +0000"
  },
  "committer": {
    "name": "Robert Kolchmeyer",
    "email": "rkolchmeyer@google.com",
    "time": "Wed May 06 12:58:44 2026 -0700"
  },
  "message": "vxlan: validate ND option lengths in vxlan_na_create\n\ncommit afa9a05e6c4971bd5586f1b304e14d61fb3d9385 upstream.\n\nvxlan_na_create() walks ND options according to option-provided\nlengths. A malformed option can make the parser advance beyond the\ncomputed option span or use a too-short source LLADDR option payload.\n\nValidate option lengths against the remaining NS option area before\nadvancing, and only read source LLADDR when the option is large enough\nfor an Ethernet address.\n\nBUG\u003db/508878249\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2026-31738 in the Linux kernel.\n\ncos-patch: security-moderate\nFixes: 4b29dba9c085 (\"vxlan: fix nonfunctional neigh_reduce()\")\nCc: stable@vger.kernel.org\nReported-by: Yifan Wu \u003cyifanwucs@gmail.com\u003e\nReported-by: Juefei Pu \u003ctomapufckgml@gmail.com\u003e\nTested-by: Ao Zhou \u003cn05ec@lzu.edu.cn\u003e\nCo-developed-by: Yuan Tan \u003ctanyuan98@outlook.com\u003e\nChange-Id: Ieffab188c73bb01e6f9b193eaac1d813b034fd9d\nSigned-off-by: Yuan Tan \u003ctanyuan98@outlook.com\u003e\nSuggested-by: Xin Liu \u003cbird@lzu.edu.cn\u003e\nSigned-off-by: Yang Yang \u003cn05ec@lzu.edu.cn\u003e\nReviewed-by: Ido Schimmel \u003cidosch@nvidia.com\u003e\nAcked-by: Nikolay Aleksandrov \u003crazor@blackwall.org\u003e\nLink: https://patch.msgid.link/20260326034441.2037420-4-n05ec@lzu.edu.cn\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Kernel CVE Triage Automation \u003ccloud-image-kernel-cve-triage-automation@prod.google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/148527\nReviewed-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Derek Taylor \u003cddtaylor@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9c3a12feb25d2cceaeec5e508a2a9b0bb61f931a",
      "old_mode": 33188,
      "old_path": "drivers/net/vxlan/vxlan_core.c",
      "new_id": "56b5a83fa8fa9430015c083fdcadfdb4563954f9",
      "new_mode": 33188,
      "new_path": "drivers/net/vxlan/vxlan_core.c"
    }
  ]
}