net/tcp-md5: Fix MAC comparison to be constant-time
authorEric Biggers <ebiggers@kernel.org>
Mon, 2 Mar 2026 20:34:09 +0000 (12:34 -0800)
committerJakub Kicinski <kuba@kernel.org>
Wed, 4 Mar 2026 02:39:43 +0000 (18:39 -0800)
commit46d0d6f50dab706637f4c18a470aac20a21900d3
tree8b6b7fb5ae167d5d3d2a0f86c83e8db8f5d7144a
parent7f5d8e63f3d4dc952548502a2227de780cbcd21f
net/tcp-md5: Fix MAC comparison to be constant-time

To prevent timing attacks, MACs need to be compared in constant
time.  Use the appropriate helper function for this.

Fixes: cfb6eeb4c860 ("[TCP]: MD5 Signature Option (RFC2385) support.")
Fixes: 658ddaaf6694 ("tcp: md5: RST: getting md5 key from listener")
Cc: stable@vger.kernel.org
Signed-off-by: Eric Biggers <ebiggers@kernel.org>
Link: https://patch.msgid.link/20260302203409.13388-1-ebiggers@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
net/ipv4/Kconfig
net/ipv4/tcp.c
net/ipv4/tcp_ipv4.c
net/ipv6/tcp_ipv6.c