diff options
| author | Serhat Kumral <serhatkumral1@gmail.com> | 2026-10-18 17:49:07 +0300 |
|---|---|---|
| committer | Leon Romanovsky <leon@kernel.org> | 2026-10-20 03:35:03 -0400 |
| commit | bb75e5580b15cd23ededf15683a5ad67d7b61aab (patch) | |
| tree | a380f4971e31e8b564f71d9f1774522b4db89032 /tools | |
| parent | 0fe31052d948a3a993bb2f58cd5886f7ec279ea7 (diff) | |
RDMA/mlx5: Validate priority in STEERING_ANCHOR_CREATE handler
In MLX5_IB_METHOD_STEERING_ANCHOR_CREATE, the user-supplied u16 priority
is passed directly to _get_flow_table() without an upper bound check.
This can lead to out-of-bounds array accesses on dev->flow_db priority
tables.
Check that priority does not exceed MLX5_IB_FLOW_LAST_PRIO before calling
_get_flow_table(), matching the existing validation in raw_fs_rule_add()
and mlx5_ib_create_flow().
Fixes: 0c6ab0ca9a66 ("RDMA/mlx5: Expose steering anchor to userspace")
Signed-off-by: Serhat Kumral <serhatkumral1@gmail.com>
Link: https://patch.msgid.link/20261018144907.20123-1-serhatkumral1@gmail.com
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions