Re: [PATCH net v7 0/3] net/smc: fix out-of-bounds and use-after-free in SMC-Rv2 LLC processing
From: patchwork-bot+netdevbpf
Date: Sat Aug 22 2026 - 16:41:18 EST
Hello:
This series was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Wed, 19 Aug 2026 11:33:03 +0900 you wrote:
> Patch 1 fixes a use-after-free of the LLC queue entry in
> smc_llc_srv_add_link(), patch 2 bounds the peer's rkey counts, and patch 3
> carries the tail of an oversized v2 message in the queue entry so that both
> readers are bounded by what arrived. All three are tagged for stable: a
> tree that takes 1 and 2 without 3 still deletes rkeys read from whatever an
> earlier message left in the shared receive buffer.
>
> [...]
Here is the summary with links:
- [net,v7,1/3] net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()
https://git.kernel.org/netdev/net/c/a42a459ef0e5
- [net,v7,2/3] net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages
https://git.kernel.org/netdev/net/c/2d1e7c5aaa33
- [net,v7,3/3] net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry
https://git.kernel.org/netdev/net/c/8d3c1ab82c11
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html