Re: [PATCH] net/sched: fix potential stack infoleak in em_text_dump()
From: patchwork-bot+netdevbpf
Date: Tue Sep 22 2026 - 22:45:23 EST
Hello:
This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Fri, 18 Sep 2026 15:39:37 +0200 you wrote:
> em_text_dump() allocates struct tcf_em_text on the stack without zeroing
> it. strscpy() writes the algorithm name and a NUL terminator into
> conf.algo[], leaving the remaining bytes uninitialised. nla_put_nohdr()
> then copies the full struct to the netlink response.
>
> KMSAN on Linux 7.2-rc6 reports two kernel-infoleak splats from this path,
> one triggered via "tc filter show" and one via a raw RTM_GETTFILTER dump:
>
> [...]
Here is the summary with links:
- net/sched: fix potential stack infoleak in em_text_dump()
https://git.kernel.org/netdev/net/c/9c572a83037a
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html