Re: [PATCH net v7 0/3] net/smc: fix out-of-bounds and use-after-free in SMC-Rv2 LLC processing
| Newsgroups | org.kernel.vger.linux-rdma,org.kernel.vger.linux-hardening,org.kernel.vger.linux-kernel,org.kernel.vger.linux-s390,org.kernel.vger.netdev |
|---|---|
| Message-ID | <178743121314.1821669.490736256443928861.git-patchwork-notify@kernel.org> |
Hello: This series was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Wed, 19 Aug 2026 11:33:03 +0900 you wrote: > Patch 1 fixes a use-after-free of the LLC queue entry in > smc_llc_srv_add_link(), patch 2 bounds the peer's rkey counts, and patch 3 > carries the tail of an oversized v2 message in the queue entry so that both > readers are bounded by what arrived. All three are tagged for stable: a > tree that takes 1 and 2 without 3 still deletes rkeys read from whatever an > earlier message left in the shared receive buffer. > > [...] Here is the summary with links: - [net,v7,1/3] net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() https://git.kernel.org/netdev/net/c/a42a459ef0e5 - [net,v7,2/3] net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages https://git.kernel.org/netdev/net/c/2d1e7c5aaa33 - [net,v7,3/3] net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry https://git.kernel.org/netdev/net/c/8d3c1ab82c11 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html