Re: [PATCH net] bonding: fix out-of-bounds read of arp_ip_target

From: patchwork-bot+netdevbpf

Date: Mon Oct 26 2026 - 19:33:29 EST


Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Fri, 23 Oct 2026 18:45:27 +0800 you wrote:
> arp_ip_target is a module parameter array with BOND_MAX_ARP_TARGETS
> entries. In the loop parsing it in bond_check_params(), arp_ip_count is
> the number of accepted targets, while i is the index into
> arp_ip_target. Invalid and duplicate entries are skipped without
> bumping arp_ip_count, so bounding the loop with arp_ip_count lets i run
> past the end of arp_ip_target, e.g. 16 targets with one duplicate:
>
> [...]

Here is the summary with links:
- [net] bonding: fix out-of-bounds read of arp_ip_target
https://git.kernel.org/netdev/net/c/a81513bf5bdf

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html