Re: [PATCH] macsec: reject frames that decapsulate into runt Ethernet frames

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Dave Miller <davem@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>:

On Thu, 29 Oct 2026 21:22:37 -0700 you wrote:
> When an SCI is unknown and the C bit is clear, macsec_handle_frame()
> removes the SecTAG and the default ICV without checking how much of the
> frame remains. A short frame can therefore become an skb shorter than
> ETH_HLEN. eth_type_trans() cannot pull its Ethernet header, and a second
> stacked MACsec device can copy stale skb headroom into a packet delivered
> to a packet socket.
> 
> [...]

Here is the summary with links:
  - macsec: reject frames that decapsulate into runt Ethernet frames
    https://git.kernel.org/netdev/net/c/1d5e2c57e9ff

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html