]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
net: enetc: check the number of BDs needed for xdp_frame
authorWei Fang <wei.fang@nxp.com>
Fri, 26 Jun 2026 07:32:44 +0000 (15:32 +0800)
committerJakub Kicinski <kuba@kernel.org>
Sat, 27 Jun 2026 22:18:36 +0000 (15:18 -0700)
commit555c5475e787802eeae0d2b91c2f66c330db2767
tree7e3a0f8da1c57b3f617116f99b4f07b1263df1ac
parent56114690ff3ce1d1d65e5a2e5f77498da41883a4
net: enetc: check the number of BDs needed for xdp_frame

The size of xdp_redirect_arr array is ENETC_MAX_SKB_FRAGS. However, the
number of fragments contained in xdp_frame may be greater than or equal
to ENETC_MAX_SKB_FRAGS, which will cause the access to xdp_redirect_arr
to be out of bounds.

Fixes: 9d2b68cc108d ("net: enetc: add support for XDP_REDIRECT")
Signed-off-by: Wei Fang <wei.fang@nxp.com>
Link: https://patch.msgid.link/20260626073244.2168214-1-wei.fang@oss.nxp.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
drivers/net/ethernet/freescale/enetc/enetc.c