]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commit
net/mlx5: DR, Fix wrong action data allocation in decap action
authorYevgeny Kliteynik <kliteyn@nvidia.com>
Sun, 4 Jun 2023 18:07:04 +0000 (21:07 +0300)
committerRoxana Nicolescu <roxana.nicolescu@canonical.com>
Mon, 2 Oct 2023 15:19:21 +0000 (17:19 +0200)
commita2810adbad0a4bfb57f178433de0a4bed8710a98
treeebcb1d913f48ac297b8e9ea36e104416de9cc9d8
parent39fc7401bb7da541dd09db5a7e2f5c1e350df55a
net/mlx5: DR, Fix wrong action data allocation in decap action

BugLink: https://bugs.launchpad.net/bugs/2033931
[ Upstream commit ef4c5afc783dc3d47640270a9b94713229c697e8 ]

When TUNNEL_L3_TO_L2 decap action was created, a pointer to a local
variable was passed as its HW action data, resulting in attempt to
free invalid address:

  BUG: KASAN: invalid-free in mlx5dr_action_destroy+0x318/0x410 [mlx5_core]

Fixes: 4781df92f4da ("net/mlx5: DR, Move STEv0 modify header logic")
Signed-off-by: Yevgeny Kliteynik <kliteyn@nvidia.com>
Reviewed-by: Alex Vesker <valex@nvidia.com>
Signed-off-by: Saeed Mahameed <saeedm@nvidia.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
drivers/net/ethernet/mellanox/mlx5/core/steering/dr_action.c