diff options
| author |   Ahmed Zaki <ahmed.zaki@intel.com> | 2024-06-14 07:18:42 -0600 |
|---|---|---|
| committer |   Tony Nguyen <anthony.l.nguyen@intel.com> | 2024-07-23 15:26:41 -0700 |
| commit | 6ebbe97a488179f5dc85f2f1e0c89b486e99ee97 (patch) | |
| tree | b2af4165ff72155aea1fcc54717c30a5543f1767 /scripts/generate_rust_analyzer.py | |
| parent | net: bonding: correctly annotate RCU in bond_should_notify_peers() (diff) | |
| download | wireguard-linux-6ebbe97a488179f5dc85f2f1e0c89b486e99ee97.tar.xz wireguard-linux-6ebbe97a488179f5dc85f2f1e0c89b486e99ee97.zip | |
ice: Add a per-VF limit on number of FDIR filters
While the iavf driver adds a s/w limit (128) on the number of FDIR
filters that the VF can request, a malicious VF driver can request more
than that and exhaust the resources for other VFs.
Add a similar limit in ice.
CC: stable@vger.kernel.org
Fixes: 1f7ea1cd6a37 ("ice: Enable FDIR Configure for AVF")
Reviewed-by: Przemek Kitszel <przemyslaw.kitszel@intel.com>
Suggested-by: Sridhar Samudrala <sridhar.samudrala@intel.com>
Signed-off-by: Ahmed Zaki <ahmed.zaki@intel.com>
Reviewed-by: Wojciech Drewek <wojciech.drewek@intel.com>
Tested-by: Rafal Romanowski <rafal.romanowski@intel.com>
Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com>
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions