# Re: \[PATCH net v5\] qede: Fix NULL pointer dereference in TPA fragment processing

- From: patchwork-bot+netdevbpf@kernel.org
- Date: 2026-08-22 20:31:13 
- List: netdev
- Page: https://ratatoskr.run/netdev/2026/08/17448998
- Thread: https://ratatoskr.run/netdev/2026/08/17427419/t.md

```text
Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski [ref]:

On Tue, 18 Aug 2026 13:03:09 +0530 you wrote:
> Under memory pressure, the qede driver encounters NULL pointer
> dereferences when processing TPA continuation fragments.
> 
> Commit 8a8633978b84 ("qede: Add build_skb() support.") accidentally
> dropped the assignment of tpa_info->buffer.data in qede_tpa_start().
> 
> When memory pressure causes an SKB allocation failure in qede_tpa_start(),
> the driver sets tpa_start_fail = true and attempts to recycle the physical
> page later in qede_tpa_end() via qede_reuse_page(). However, because
> buffer.data was left uninitialized (NULL), qede_reuse_page() pushes a
> "ghost" BD (valid DMA mapping but NULL data pointer) back into the
> active Rx ring.
> 
> [...]

Here is the summary with links:
  - [net,v5] qede: Fix NULL pointer dereference in TPA fragment processing
    https://git.kernel.org/netdev/net/c/06aa3d26327f

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html


```
