Re: [PATCH net v04] hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed
Jakub Kicinski <[email protected]>
| Newsgroups | gmane.linux.documentation,gmane.linux.network,gmane.linux.kernel |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 11 Aug 2026 19:43:59 +0800 Fan Gong wrote: > Previously, hinic3_send_one_skb() cached the skb fragment count before > calling hinic3_tx_offload(). If hinic3_tx_csum() falls back to > skb_checksum_help() for unsupported tunnel packets, the skb may be > linearized. Continuing to build the TX descriptor with the stale > fragment count leads to a descriptor mismatch, which can trigger > out-of-bounds DMA reads or IOMMU faults. Applied, thanks! -- pw-bot: accept