Hello:
This patch was applied to netdev/net.git (main)
by Jakub Kicinski [off-list ref]:
On Sun, 13 Sep 2026 10:31:08 +0000 you wrote:
From: Mark Amirkan <redacted>
tpacket_req3.tp_sizeof_priv is an unsigned int, and packet_set_ring()
validates the full value against the block size. init_prb_bdqc() then
stores it in the unsigned short blk_sizeof_priv field.
Commit 2b6867c2ce76 ("net/packet: fix overflow in check for priv area
size") fixed the validation arithmetic, but an accepted value above
USHRT_MAX still narrows when it is stored.
[...]
Here is the summary with links:
- [net] net/packet: avoid truncating TPACKET_V3 private size
https://git.kernel.org/netdev/net/c/37213e611202
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html