Re: [PATCH net v2] vxlan: vnifilter: validate the VNI range in vni_filter_entry_policy

[Jakub Kicinski]

On Sat, 05 Sep 2026 19:36:51 +0000 netdev-bot+sashiko@xxxxxxxxxx wrote:
> > +	[VXLAN_VNIFILTER_ENTRY_START] = NLA_POLICY_FULL_RANGE(NLA_U32,
> > +							      &vni_filter_vni_range),
> > +	[VXLAN_VNIFILTER_ENTRY_END] = NLA_POLICY_FULL_RANGE(NLA_U32,
> > +							    &vni_filter_vni_range),  
> 
> [Severity: High]
> Does this clamp close the problem the changelog describes, or only the
> U32_MAX endpoint?

I tend to agree, either this is a security fix and we need a stronger
check. Or it's just making things slightly better and doesn't deserve
Fixes/stable.
-- 
pw-bot: cr