[PATCH net-next v2 0/2] Guard against gso_segs overflows
From: Alice Mikityanska <hidden>
Date: 2026-08-13 17:46:22
From: Alice Mikityanska <redacted> This series is a follow-up on the discussion: https://lore.kernel.org/netdev/CAD0BsJWzSr2zduf5v3mVC4zd=Lj6ZAoC+V42-VBdg42aDY8XXw@mail.gmail.com/T/#m1e22fca273c36cc8844e516505d3251cc1418fea (local) skb_segment is patched to avoid possible overflows in partial GSO. The primary possible source of too many GSO segments is also addressed: virtio-net clamps gso_size to >=8 in TCP, as suggested by Eric. v2 changes: dropped new checks in fastpath from skb_gro_receive and __virtio_net_hdr_to_skb, replaced the latter with a silent clamp for gso_size, kept the cheap guard in skb_segment. v1: https://lore.kernel.org/netdev/20260723155145.158572-1-alice.kernel@fastmail.im/ (local) Alice Mikityanska (2): net: Guard for gso_segs overflow in skb_segment virtio-net: Ensure that TCP packets don't overflow gso_segs include/linux/virtio_net.h | 4 ++++ net/core/skbuff.c | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) -- 2.55.0