On Mon, Jun 30, 2025 at 10:42 PM Bui Quang Minh minhquangbui99@gmail.com wrote:
In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.
Cc: stable@vger.kernel.org Fixes: 4941d472bf95 ("virtio-net: do not reset during XDP set") Signed-off-by: Bui Quang Minh minhquangbui99@gmail.com
Acked-by: Jason Wang jasowang@redhat.com
Thanks