Re: [PATCH net v2] vxlan: vnifilter: validate the VNI range in vni_filter_entry_policy
From: Jakub Kicinski <kuba@kernel.org>
Date: 2026-09-05 19:39:01
Also in:
lkml, stable
On Sat, 05 Sep 2026 19:36:51 +0000 netdev-bot+sashiko@kernel.org wrote:
quoted
+ [VXLAN_VNIFILTER_ENTRY_START] = NLA_POLICY_FULL_RANGE(NLA_U32, + &vni_filter_vni_range), + [VXLAN_VNIFILTER_ENTRY_END] = NLA_POLICY_FULL_RANGE(NLA_U32, + &vni_filter_vni_range),[Severity: High] Does this clamp close the problem the changelog describes, or only the U32_MAX endpoint?
I tend to agree, either this is a security fix and we need a stronger check. Or it's just making things slightly better and doesn't deserve Fixes/stable. -- pw-bot: cr