Re: [PATCH] RDMA/mlx5: Validate priority in STEERING_ANCHOR_CREATE handler

[Leon Romanovsky]

On Sun, 18 Oct 2026 17:49:07 +0300, Serhat Kumral wrote:
> In MLX5_IB_METHOD_STEERING_ANCHOR_CREATE, the user-supplied u16 priority
> is passed directly to _get_flow_table() without an upper bound check.
> This can lead to out-of-bounds array accesses on dev->flow_db priority
> tables.
> 
> Check that priority does not exceed MLX5_IB_FLOW_LAST_PRIO before calling
> _get_flow_table(), matching the existing validation in raw_fs_rule_add()
> and mlx5_ib_create_flow().
> 
> [...]

Applied, thanks!

[1/1] RDMA/mlx5: Validate priority in STEERING_ANCHOR_CREATE handler
      https://git.kernel.org/rdma/rdma/c/bb75e5580b15cd

Best regards,
-- 
Leon Romanovsky <leon@xxxxxxxxxx>