Re: [PATCH net-next v2 0/5] ynl/ethtool/netlink: fix nla_len overflow for large string sets

patchwork-bot+netdevbpf
2026-04-12T18:40:49Z

Hello:

This series was applied to netdev/net-next.git (main)
by Jakub Kicinski <kuba@kernel.org>:

On Wed, 08 Apr 2026 15:08:48 +0800 you wrote:
> This series addresses a silent data corruption issue triggered when ynl
> retrieves string sets from NICs with a large number of statistics entries
> (e.g. mlx5_core with thousands of ETH_SS_STATS strings).
>
> The root cause is that struct nlattr.nla_len is a __u16 (max 65535
> bytes). When a NIC exports enough statistics strings, the
> ETHTOOL_A_STRINGSET_STRINGS nest built by strset_fill_set() exceeds
> this limit. nla_nest_end() silently truncates the length on assignment,
> producing a corrupted netlink message.
>
> [...]

Here is the summary with links:
- [net-next,v2,1/5] tools: ynl: move ethtool.py to selftest
https://git.kernel.org/netdev/net-next/c/22ef8a263c17
- [net-next,v2,2/5] tools: ynl: ethtool: use doit instead of dumpit for per-device GET
https://git.kernel.org/netdev/net-next/c/1c43d471a513
- [net-next,v2,3/5] tools: ynl: ethtool: add --dbg-small-recv option
https://git.kernel.org/netdev/net-next/c/594ba4477164
- [net-next,v2,4/5] netlink: add a nla_nest_end_safe() helper
https://git.kernel.org/netdev/net-next/c/1346586a9ac9
- [net-next,v2,5/5] ethtool: strset: check nla_len overflow
https://git.kernel.org/netdev/net-next/c/b2fb1a336383

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.