Thread (2 messages) 2 messages, 2 authors, 25d ago

Re: [PATCH net] octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-05-25 20:00:01
Also in: lkml

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski [off-list ref]:

On Wed, 20 May 2026 11:41:57 -0400 you wrote:
rvu_mbox_handler_rep_event_notify() in drivers/net/ethernet/marvell/
octeontx2/af/rvu_rep.c queues a sender-controlled REP_EVENT_NOTIFY
request body verbatim, and rvu_rep_up_notify() then forwards
event->pcifunc (the nested body field, distinct from the
AF-normalised header pcifunc) into rvu_get_pfvf(), rvu_get_pf() and
the AF->PF mailbox device index without any bounds check.

[...]
Here is the summary with links:
  - [net] octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify
    https://git.kernel.org/netdev/net/c/2156a29aecff

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help