Re: [PATCH net v5] qede: Fix NULL pointer dereference in TPA fragment processing
| Newsgroups | org.kernel.vger.netdev,org.kernel.vger.linux-kernel,org.kernel.vger.stable |
|---|---|
| Message-ID | <178743062214.1819488.4090246622562487688.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Tue, 18 Aug 2026 13:03:09 +0530 you wrote: > Under memory pressure, the qede driver encounters NULL pointer > dereferences when processing TPA continuation fragments. > > Commit 8a8633978b84 ("qede: Add build_skb() support.") accidentally > dropped the assignment of tpa_info->buffer.data in qede_tpa_start(). > > When memory pressure causes an SKB allocation failure in qede_tpa_start(), > the driver sets tpa_start_fail = true and attempts to recycle the physical > page later in qede_tpa_end() via qede_reuse_page(). However, because > buffer.data was left uninitialized (NULL), qede_reuse_page() pushes a > "ghost" BD (valid DMA mapping but NULL data pointer) back into the > active Rx ring. > > [...] Here is the summary with links: - [net,v5] qede: Fix NULL pointer dereference in TPA fragment processing https://git.kernel.org/netdev/net/c/06aa3d26327f You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html