Thread (4 messages) flat view 4 messages, 4 authors, 19d ago

Re: [PATCH net v4] xsk: fix NULL pointer dereference in __xsk_rcv()

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-08-19 03:10:54
Also in: bpf, lkml

Hello:

This patch was applied to netdev/net.git (main)
by David S. Miller [off-list ref]:

On Thu, 13 Aug 2026 17:53:28 -0400 you wrote:
In the __xsk_rcv() multi-buffer path, xsk_buff_alloc() is called in a
loop without checking its return value. xsk_buff_can_alloc() only
counts fill queue entries without validating their addresses, so it
can succeed while xsk_buff_alloc() rejects all remaining entries and
returns NULL.

  Oops: general protection fault, probably for non-canonical address
   0xdffffc0000000000
  KASAN: null-ptr-deref in range
   [0x0000000000000000-0x0000000000000007]
  RIP: 0010:__xsk_rcv+0x426/0xc20 (net/xdp/xsk.c:350)
  Call Trace:
   xsk_generic_rcv+0x26d/0x5f0
   xdp_do_generic_redirect+0x3c5/0xcf0
   do_xdp_generic+0x92f/0xe70
   __netif_receive_skb_core.constprop.0+0xf7e/0x2b30

[...]
Here is the summary with links:
  - [net,v4] xsk: fix NULL pointer dereference in __xsk_rcv()
    https://git.kernel.org/netdev/net/c/73cee2bd5c96

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help