Re: [PATCH net v3 0/5] net: fix misc signed overflows caused by bad sysctl values

From: Paolo Abeni

Date: Thu Nov 05 2026 - 06:11:16 EST


On 11/1/26 07:11, Jiayuan Chen wrote:
Recently I have reviewed quite a few fixes for variable overflows caused
by config values, i.e. a value set from sysctl, module params or netlink
that is accepted as valid but later overflows when it is used in a
calculation. I believe there are more of these still out there, so I
used an LLM to dig through the code and it found the issues fixed in
this series.

All of them have been reproduced and verified in QEMU.
I think that the 'net' target + CC stable here is a bit too much.

The uAPI changes, even if reasonable, can still impact weird scenarios.

Targeting 'net-next' without CC ing stable would give time to
possibly catch such users.

Also issue predating git history and exploitable from root only
nowadays is a quite a good signal for net-next target.

If nobody opposes soonish I'll apply the series there.

/P