diff options
| author | Stefano Garzarella <sgarzare@redhat.com> | 2026-05-21 15:47:32 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2026-06-19 14:48:13 +0300 |
| commit | cfd5fc814790233446acac03830e45d5b1646ce4 (patch) | |
| tree | 56584bad8d3293d7df99bbfc618690ae523b5c49 /tools/lib/python/kdoc/python_version.py | |
| parent | 7da48313876ec620c803705b080421f24cc1b2e8 (diff) | |
| download | linux-cfd5fc814790233446acac03830e45d5b1646ce4.tar.xz | |
vsock/virtio: fix skb overhead overflow on 32-bit builds
commit 4157501b9a8ff1bbe32ff5a7d8aece7ab18eff40 upstream.
On 32-bit architectures, both skb_queue_len() and SKB_TRUESIZE(0) evaluate
to 32-bit values. The multiplication can overflow before being assigned to
the u64 skb_overhead variable, making the skb overhead check ineffective.
Cast skb_queue_len() to u64 so the multiplication is always performed in
64-bit arithmetic.
This issue was reported by Sashiko while reviewing another patch.
Fixes: 059b7dbd20a6 ("vsock/virtio: fix potential unbounded skb queue")
Closes: https://sashiko.dev/#/patchset/20260518090656.134588-1-sgarzare%40redhat.com
Cc: stable@vger.kernel.org
Signed-off-by: Stefano Garzarella <sgarzare@redhat.com>
Acked-by: Michael S. Tsirkin <mst@redhat.com>
Link: https://patch.msgid.link/20260521124732.125771-1-sgarzare@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'tools/lib/python/kdoc/python_version.py')
0 files changed, 0 insertions, 0 deletions