> -----Original Message----- > From: Simon Horman <[email protected]> > Sent: Monday, September 21, 2026 12:35 PM > To: Wentao Liang <[email protected]> > Cc: [email protected]; Nguyen, Anthony L <[email protected]>; > [email protected]; [email protected]; [email protected]; > [email protected]; [email protected]; [email protected]; > [email protected]; Kitszel, Przemyslaw <[email protected]>; > [email protected]; [email protected] > Subject: Re: [PATCH] ixgbevf: fix xfrm_state reference leak in > ixgbevf_ipsec_rx() > > On Thu, Sep 17, 2026 at 11:14:18AM +0000, Wentao Liang wrote: > > ixgbevf_ipsec_find_rx_state() returns the state with an extra > > reference, which is handed over to the secpath on the success path. > > When > > secpath_set() fails, the state has not been stored anywhere yet and > > the reference is dropped on the floor. > > > > Release it before returning. > > > > Fixes: 0062e7cc955e0 ("ixgbevf: add VF IPsec offload code") > > Cc: [email protected] > > Signed-off-by: Wentao Liang <[email protected]> > > Reviewed-by: Simon Horman <[email protected]>
Tested-by: Rafal Romanowski <[email protected]>
