[SRU Request] xfrm: packets sent trough a raw socket don't match ipsec policies with proto selector

[Nicolas Dichtel]

Hi Ubuntu kernel team,

please, could you consider to backport, up to focal, the linux upstream commit
3632679d9e4f ("ipv{4,6}/raw: fix output xfrm lookup wrt protocol"):

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3632679d9e4f

It will be included in v6.4 and has been backported in v5.15.115:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=395d846c61c5

Here is the launchpad entry:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2024187

Thank you,
Nicolas