]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
net: hns3: add VLAN id validation before using
authorJian Shen <shenjian15@huawei.com>
Thu, 11 Dec 2025 02:37:37 +0000 (10:37 +0800)
committerPaolo Abeni <pabeni@redhat.com>
Thu, 18 Dec 2025 15:58:28 +0000 (16:58 +0100)
commit6ef935e65902bfed53980ad2754b06a284ea8ac1
treea6bd91bd217a8c8ebe6f4c8ce7ffe774caeba6e6
parentd180c11aa8a6fa735f9ac2c72c61364a9afc2ba7
net: hns3: add VLAN id validation before using

Currently, the VLAN id may be used without validation when
receive a VLAN configuration mailbox from VF. The length of
vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause
out-of-bounds memory access once the VLAN id is bigger than
or equal to VLAN_N_VID.

Therefore, VLAN id needs to be checked to ensure it is within
the range of VLAN_N_VID.

Fixes: fe4144d47eef ("net: hns3: sync VLAN filter entries when kill VLAN ID failed")
Signed-off-by: Jian Shen <shenjian15@huawei.com>
Signed-off-by: Jijie Shao <shaojijie@huawei.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/20251211023737.2327018-4-shaojijie@huawei.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c