[PATCH net 0/3] net/mlx5: Fix HWS and DR steering memory safety bugs

From: Tariq Toukan

Date: Wed Oct 21 2026 - 03:55:43 EST


Hi,

This series by Yevgeny fixes three memory safety bugs in the mlx5
software and hardware steering code paths.

All three are missing-check or wrong-allocation problems that lead to a
NULL pointer being inserted into an xarray, a heap buffer overflow, or
an out-of-bounds write that corrupts the kernel heap.

Regards,
Tariq

Yevgeny Kliteynik (3):
net/mlx5: HWS, Handle NULL in vport destination action creation
net/mlx5: HWS, Fix heap buffer overflow in insert header action
net/mlx5: DR, Fix out-of-bounds write when sync to HW fails

.../mellanox/mlx5/core/steering/hws/action.c | 7 +++++-
.../mellanox/mlx5/core/steering/hws/fs_hws.c | 3 +++
.../mlx5/core/steering/sws/dr_icm_pool.c | 23 +++++++++++++++++--
3 files changed, 30 insertions(+), 3 deletions(-)


base-commit: b6ef0d965fe8ce0ee4b4dcb58b3511f83003e42d
--
2.44.0