Jian ShenandGreg Kroah-Hartman b7b4f3bf11 net: hns3: add VLAN id validation before using ...

[ Upstream commit 6ef935e659 ]

Currently, the VLAN id may be used without validation when
receive a VLAN configuration mailbox from VF. The length of
vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause
out-of-bounds memory access once the VLAN id is bigger than
or equal to VLAN_N_VID.

Therefore, VLAN id needs to be checked to ensure it is within
the range of VLAN_N_VID.

Fixes: fe4144d47e ("net: hns3: sync VLAN filter entries when kill VLAN ID failed")
Signed-off-by: Jian Shen <shenjian15@huawei.com>
Signed-off-by: Jijie Shao <shaojijie@huawei.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/20251211023737.2327018-4-shaojijie@huawei.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-01-11 15:21:48 +01:00

..

appletalk

…

arcnet

…

bonding

bonding: check xdp prog when set bond mode

2025-12-07 06:18:53 +09:00

caif

…

can

can: rcar_canfd: Fix CAN-FD mode as default

2025-12-07 06:18:54 +09:00

dsa

net: dsa: microchip: Free previously initialized ports on init failures

2025-12-07 06:18:54 +09:00

ethernet

net: hns3: add VLAN id validation before using

2026-01-11 15:21:48 +01:00

fddi

…

fjes

minmax: make generic MIN() and MAX() macros available everywhere

2025-10-02 13:42:55 +02:00

hamradio

6pack: drop redundant locking and refcounting

2025-11-24 10:29:45 +01:00

hippi

…

hyperv

…

ieee802154

…

ipa

…

ipvlan

ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()

2026-01-11 15:21:45 +01:00

mctp

…

mdio

net: phy: fixed_phy: let fixed_phy_unregister free the phy_device

2025-11-24 10:29:30 +01:00

netdevsim

…

pcs

…

phy

net: phy: adin1100: Fix software power-down ready condition

2026-01-11 15:21:27 +01:00

plip

…

ppp

…

pse-pd

…

slip

…

team

…

thunderbolt

…

usb

net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup

2025-11-24 10:29:52 +01:00

vmxnet3

vmxnet3: unregister xdp rxq info in the reset path

2025-09-25 11:00:09 +02:00

vxlan

…

wan

…

wireguard

…

wireless

wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet

2026-01-11 15:21:43 +01:00

wwan

…

xen-netback

…

amt.c

…

bareudp.c

…

dummy.c

…

eql.c

…

geneve.c

…

gtp.c

…

ifb.c

…

Kconfig

…

LICENSE.SRC

…

loopback.c

…

macsec.c

…

macvlan.c

…

macvtap.c

…

Makefile

…

mdio.c

…

mhi_net.c

…

mii.c

…

net_failover.c

…

netconsole.c

…

nlmon.c

…

ntb_netdev.c

…

rionet.c

…

sb1000.c

…

Space.c

…

sungem_phy.c

…

tap.c

…

tun.c

…

veth.c

…

virtio_net.c

virtio-net: fix incorrect flags recording in big mode

2025-11-24 10:30:00 +01:00

vrf.c

…

vsockmon.c

…

xen-netfront.c

…