[lvc-project] [PATCH net] net: mvpp2: prevent buffer overflow in page_pool allocation

patchwork-bot+netdevbpf at kernel.org patchwork-bot+netdevbpf at kernel.org
Thu Sep 17 15:50:04 MSK 2026


Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni at redhat.com>:

On Mon, 14 Sep 2026 12:15:57 +0300 you wrote:
> The per‑processor buffering scheme is supported only if the
> number of pools (nrxqs * 2) does not exceed MVPP2_BM_MAX_POOLS (8).
> This is already checked in mvpp2_probe() during the initial
> activation of percpu_pools.
> 
> However, mvpp2_change_mtu() may later call
> mvpp2_bm_switch_buffers(priv, true) without this check, which can
> lead to an out-of-bounds access in the priv->page_pool array in
> mvpp2_bm_init(). The array is sized to hold MVPP2_PORT_MAX_RXQ
> entries, and mvpp2_get_nrxqs() may return exactly that value. The
> per-CPU scheme then doubles it to nrxqs * 2, exceeding the array
> bounds.
> 
> [...]

Here is the summary with links:
  - [net] net: mvpp2: prevent buffer overflow in page_pool allocation
    https://git.kernel.org/netdev/net/c/14cb1e7702e5

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html





More information about the lvc-project mailing list