Re: [PATCH net v3 0/5] net: fix misc signed overflows caused by bad sysctl values
From: Paolo Abeni
Date: Thu Nov 05 2026 - 06:11:16 EST
On 11/1/26 07:11, Jiayuan Chen wrote:
Recently I have reviewed quite a few fixes for variable overflows causedI think that the 'net' target + CC stable here is a bit too much.
by config values, i.e. a value set from sysctl, module params or netlink
that is accepted as valid but later overflows when it is used in a
calculation. I believe there are more of these still out there, so I
used an LLM to dig through the code and it found the issues fixed in
this series.
All of them have been reproduced and verified in QEMU.
The uAPI changes, even if reasonable, can still impact weird scenarios.
Targeting 'net-next' without CC ing stable would give time to
possibly catch such users.
Also issue predating git history and exploitable from root only
nowadays is a quite a good signal for net-next target.
If nobody opposes soonish I'll apply the series there.
/P