On 5/23/26 3:03 PM, luka.gejak@linux.dev wrote:

From: Luka Gejak <redacted>

Ensure the entire TLV header is linearized before access by adding
sizeof(struct hsr_sup_tlv) to the pskb_may_pull() calls. Without this,
a truncated frame could cause an out-of-bounds access.

Assisted-by: Gemini:Gemini-3.1-flash
Fixes: eafaa88b3eb7 ("net: hsr: Add support for redbox supervision frames")
Signed-off-by: Luka Gejak <redacted>

Reviewed-by: Fernando Fernandez Mancera <redacted>

Thanks!