From: Olivier Matz <olivier.m...@6wind.com>
Date: Wed, 9 Jan 2019 10:57:21 +0100
> In changelink ops, the ip6gre_net pointer is retrieved from
> dev_net(dev), which is wrong in case of x-netns. Thus, the tunnel is not
> unlinked from its current list and is relinked into another net
> namespace. This corrupts the tunnel lists and can later trigger a kernel
> oops.
>
> Fix this by retrieving the netns from device private area.
>
> Fixes: c8632fc30bb0 ("net: ip6_gre: Split up ip6gre_changelink()")
> Cc: Petr Machata <pe...@mellanox.com>
> Signed-off-by: Olivier Matz <olivier.m...@6wind.com>
> Acked-by: Nicolas Dichtel <nicolas.dich...@6wind.com>
Good catch, applied and queued up for -stable.
