Re: [PATCH v3] common/cnxk: validate cipher key length

Jerin Jacob
2026-03-24T16:50:46Z

On Thu, Mar 19, 2026 at 3:20 PM Tejasree Kondoj <ktejasree@marvell.com> wrote:
>
> Validate DES/3DES and AES key lengths before copying
> into SA cipher_key[] to avoid out-of-bounds write
> into adjacent IV/salt fields.
>
> Fixes: 24d10645bdfb ("common/cnxk: support CN20K IPsec session")
> Cc: stable@dpdk.org
>
> Signed-off-by: Tejasree Kondoj <ktejasree@marvell.com>

Updated the git commit as follows and applied to
dpdk-next-net-mrvl/for-main. Thanks

common/cnxk: fix cipher key length validation

Validate DES/3DES and AES key lengths before copying
into SA cipher_key[] to avoid out-of-bounds write
into adjacent IV/salt fields.

Fixes: 24d10645bdfb ("common/cnxk: support CN20K IPsec session")