Re: [PATCH net] octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify
From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-05-25 20:00:01
Also in:
lkml
From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-05-25 20:00:01
Also in:
lkml
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski [off-list ref]: On Wed, 20 May 2026 11:41:57 -0400 you wrote:
rvu_mbox_handler_rep_event_notify() in drivers/net/ethernet/marvell/ octeontx2/af/rvu_rep.c queues a sender-controlled REP_EVENT_NOTIFY request body verbatim, and rvu_rep_up_notify() then forwards event->pcifunc (the nested body field, distinct from the AF-normalised header pcifunc) into rvu_get_pfvf(), rvu_get_pf() and the AF->PF mailbox device index without any bounds check. [...]
Here is the summary with links:
- [net] octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify
https://git.kernel.org/netdev/net/c/2156a29aecff
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html