[PATCH net 0/2] octeontx2-pf: fix ipsec transmit error paths
From: Nicolai Buchwitz
Date: Tue Oct 27 2026 - 15:55:43 EST
Two pre-existing bugs in the ipsec transmit error paths, flagged by the
clashiko review of my earlier ipsec fix for this driver [1].
Both look like edge cases to me, but at least the path in patch 1 (an SA
removed during rekey or teardown while packets are still queued) looks
plausible to me. But don't take my word for it, I'm not an octeontx2 user.
Compile-tested only, I have no octeontx2 hardware.
[1] https://lore.kernel.org/all/20261022-nb-otx2-xfrm-unshare-net-v2-1-5590c9325bcd@xxxxxxxxxxx/
Signed-off-by: Nicolai Buchwitz <nb@xxxxxxxxxxx>
---
Nicolai Buchwitz (2):
octeontx2-pf: fix skb use-after-free on ipsec transmit drop
octeontx2-pf: pass the skb to otx2_dma_unmap_skb_frags()
drivers/net/ethernet/marvell/octeontx2/nic/cn10k_ipsec.c | 5 ++++-
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c | 5 ++---
drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.h | 3 ++-
drivers/net/ethernet/marvell/octeontx2/nic/otx2_txrx.c | 10 +++++-----
4 files changed, 13 insertions(+), 10 deletions(-)
---
base-commit: 06e1899f01565572d746a8c9ed1bc94041dd7690
change-id: 20261027-nb-otx2-ipsec-tx-fixes-net-58cf6deaeda6
Best regards,
--
Nicolai Buchwitz <nb@xxxxxxxxxxx>