From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f41.google.com (mail-wm1-f41.google.com [209.85.128.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 9C831367F3A for ; Sun, 5 Apr 2026 05:52:46 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.41 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775368367; cv=none; b=t5cJnjmsqzluJ8msvJjjkbOwi3wHt7WEy9BPxR7nv7Dy6TkKm7ex1/TJtIb91fGhmHtcrJiCx7Y2UzPEDksjVev/JerAtOackj5R7F1bHe+PXPybakFqgOohvPAftHC+rUzXyUUEltgWythw8Fe60Kpdte8SBIeGKMFsjE9gwcQ= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775368367; c=relaxed/simple; bh=NRU5uh4HR/YrGemNvGy4/heUBSk12o1mw92CBOBmcWk=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=VTh9tt0MGewkPxVbKTZW8uj+4mCDCFLFyUtikIf6h/unaa3dSlqt676YXXXlptBSidhB3wXpdh7VTJyYUw56OXZBHoqkfYSaWkYLAiounjD4gVL8knDj3bxT/YsEeXeOH3AMIlORvr2ZELZG4RUyl/7t91vB6e3O+rjrN/l++rc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=VO3bt2Km; arc=none smtp.client-ip=209.85.128.41 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="VO3bt2Km" Received: by mail-wm1-f41.google.com with SMTP id 5b1f17b1804b1-48896199cbaso22836675e9.1 for ; Sat, 04 Apr 2026 22:52:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1775368365; x=1775973165; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=mu8MruZx2Msv4f1t170wsPDqDzFVNwj29jvR/Qu+G3M=; b=VO3bt2Kmkyxy6k2sZIarqjIjHERVHaAC0Ms1+3Cmb0R04ZhXAGm+gasYx6S9YNki4E +4hJ0EYmJ5c7GgGElwDZS8tGc50eS23dGyKFVa2Zlg9/3Tp1tYRy/3TkmAkZVXgT6D5W YmM/fO7fcnhVkwQq7AKZqAUvmDPUQD+z0IjObHi0Ml6r+mCWj5DrsBhQ2DpnPEYVzfpo 04pi4AlcVh6dAc8q+9FaMa9kI/zkNILCLABQ9Yq9oXF+Rbshy3CkWrNz6BttbxKSUKqm ynhvMjzCwwz+oIkJAuSrjuHsbRzg3MO27OXvrrS5jjaXRZO0elKHzT4zVhRytHDhU1Cy yt0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1775368365; x=1775973165; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=mu8MruZx2Msv4f1t170wsPDqDzFVNwj29jvR/Qu+G3M=; b=quQ3+SO95F+Jh6Cj+SBN0mAXgOUustAc971Ipaz3CI4tsvVDcPe2qsZ8IPvO6UsDiY fcAdYS11ZwvLDo9Wg0ikZ8NiLDUxg15Ye0Stw8da4hQQOWHfByofe8+q5QhyACJsoI3G NfbjSKJ8+IVdNqP5JLIGBEgF/ZpdYiAynGT+etzdhID164w3nhfQ87tjjNWG8fBS44B9 CJ2Ebl2sliDu1+DJxR7Yqar8SrGeBBRgT1Yxqx6v6gCTvM36L41Bow5SkaqsMWyUpoKE pyh4nd8USEvqWVzNWSZt+HQaBNc1vQRhRD7965UlNW47W6lUlOH4mFoQfGcHQYh6tenU roNA== X-Gm-Message-State: AOJu0YzoMVHywGilektjniy8N5riI5bP5pe6yP2Ke4jNAiaAEN7DbzR7 MVBDr1CCfFVzWzBzr2aP0RQ5HhsSdxLlVqyLhoNSdGaXU+cZiA3Z4TYhn84aGKKM1W/Q3A== X-Gm-Gg: AeBDies9RKTTUS1hte1Fpt2/DUqqnktp+eZXG0tx4huQvYk/dZShhTqW+kf6Tyfw70y ac0Iuklfz4yagEQgng6FUGw0/rg/jxUaorlmISJTsnmH990STDg/WRt3Dv4gjoLqPw8DnPmbhoO JRQ/nFwciEW4Yj83suQJx+NrJ/ahTIklfblY5dD77qT1trTa0HK7tUWJrd3+mENK9+jY2wk5LhM 03rd6QIkNfyEQh2Ql2EyWnf5Eeb1/SRwyL5bsEicgeuHdn1sVOQMoI0xAfT9iZwmA0AdlksuA9U C4deBfPNmIt62dG/cqa3/63fij+dPfnLJxcFWWcUHb/f/TK8sQJ/VtVJgSPP1S4bXmuQkxLJ3Y/ legkJ5XRpwY4+kz6S7HMP0seEJjySbY7kQ0HH52XwQ+J+3Ak10gKf3nQAMvyznYKrhY6q68CknK NX6JviQjcgFnETQLsLd+6eq539HIM+RzgDXQTi5R+wAAmMmTUHH5vsbMiCe20WGzHfSpxFWzymg ulSFoaXzxQV X-Received: by 2002:a05:600c:3105:b0:485:7f02:afd5 with SMTP id 5b1f17b1804b1-4889975f7ccmr120918525e9.13.1775368364789; Sat, 04 Apr 2026 22:52:44 -0700 (PDT) Received: from dohko.chello.ie (188-141-5-72.dynamic.upc.ie. [188.141.5.72]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-48899e960a7sm55847465e9.27.2026.04.04.22.52.43 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 04 Apr 2026 22:52:44 -0700 (PDT) From: David Carlier To: horatiu.vultur@microchip.com, UNGLinuxDriver@microchip.com, andrew+netdev@lunn.ch, davem@davemloft.net, edumazet@google.com, kuba@kernel.org, pabeni@redhat.com, netdev@vger.kernel.org, linux-kernel@vger.kernel.org Cc: stable@vger.kernel.org, David Carlier Subject: [PATCH net v3 0/3] net: lan966x: fix page_pool error handling and error paths Date: Sun, 5 Apr 2026 06:52:38 +0100 Message-ID: <20260405055241.35767-1-devnexen@gmail.com> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit This series fixes error handling around the lan966x page pool: 1/3 adds the missing IS_ERR check after page_pool_create(), preventing a kernel oops when the error pointer flows into xdp_rxq_info_reg_mem_model(). 2/3 plugs page pool leaks in the lan966x_fdma_rx_alloc() and lan966x_fdma_init() error paths, now reachable after 1/3. 3/3 fixes a use-after-free and page pool leak in the lan966x_fdma_reload() restore path, where the hardware could resume DMA into pages already returned to the page pool. David Carlier (3): net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() net: lan966x: fix page pool leak in error paths net: lan966x: fix use-after-free and leak in lan966x_fdma_reload() .../ethernet/microchip/lan966x/lan966x_fdma.c | 28 ++++++++++++++++--- 1 file changed, 24 insertions(+), 4 deletions(-) -- v2 -> v3: - 1/3: remove blank line between page_pool_create() and IS_ERR check (Jakub) - 2/3: drop rx->page_pool = NULL for consistency with lan966x_fdma_init() cleanup; update commit message accordingly (Jakub) - 3/3: remove blank line between kmemdup() and !old_pages check (Jakub) v1 -> v2: address caller error paths raised by Jakub's review; add patches 2/3 and 3/3 v1: https://lore.kernel.org/netdev/20260402172823.83467-1-devnexen@gmail.com v2: https://lore.kernel.org/netdev/20260403230714.10667-1-devnexen@gmail.com 2.53.0