Re: [PATCH net] dibs: loopback: validate offset and size in move_data()

From: patchwork-bot+netdevbpf

Date: Thu Jul 09 2026 - 07:11:11 EST


Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@xxxxxxxxxx>:

On Tue, 7 Jul 2026 15:43:18 +0800 you wrote:
> The loopback move_data() performs a memcpy into the registered DMB
> without checking whether offset + size exceeds the DMB length. Unlike
> real ISM hardware, which enforces memory region bounds natively, the
> software loopback has no such protection.
>
> A peer-supplied out-of-bounds offset or oversized write would result in
> an OOB write past the allocated kernel buffer. Add an explicit bounds
> check before the memcpy to reject such requests with -EINVAL.
>
> [...]

Here is the summary with links:
- [net] dibs: loopback: validate offset and size in move_data()
https://git.kernel.org/netdev/net/c/78237e3c0720

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html