Re: [PATCH net v3 0/2] fix skb length accounting after XDP frag adjustment
| Newsgroups | org.kernel.vger.bpf,org.kernel.vger.netdev |
|---|---|
| Message-ID | <178614780893.2472232.3476445161092062849.git-patchwork-notify@kernel.org> |
Hello: This series was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Mon, 3 Aug 2026 22:40:37 -0700 you wrote: > This series fixes skb length accounting after an XDP program adjusts its > fragment area, in both the generic XDP path (net/core/dev.c) and the veth > native path (drivers/net/veth.c). When the fragment area is resized, > skb->len and skb->data_len can go out of sync, and in the reproduced UDP > receive path this leaked skb_shared_info contents (including a kernel > pointer) to userspace while truncating real payload. > > [...] Here is the summary with links: - [net,v3,1/2] net: fix skb length accounting after generic XDP frag adjustment https://git.kernel.org/netdev/net/c/33f2b2eb33d6 - [net,v3,2/2] veth: fix skb length accounting after XDP frag adjustment https://git.kernel.org/netdev/net/c/cb6379feaaff You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html