> -----Original Message----- > From: Joe Damato <[email protected]> > Sent: Wednesday, September 30, 2026 2:48 AM > To: Wentao Liang <[email protected]> > Cc: [email protected]; Nguyen, Anthony L <[email protected]>; > [email protected]; [email protected]; [email protected]; > [email protected]; [email protected]; [email protected]; > [email protected]; Kitszel, Przemyslaw <[email protected]>; > [email protected]; [email protected] > Subject: Re: [PATCH] ixgbevf: fix xfrm_state reference leak in > ixgbevf_ipsec_rx() > > On Thu, Sep 17, 2026 at 11:14:18AM +0000, Wentao Liang wrote: > > ixgbevf_ipsec_find_rx_state() returns the state with an extra > > reference, which is handed over to the secpath on the success path. > > When > > secpath_set() fails, the state has not been stored anywhere yet and > > the reference is dropped on the floor. > > > > Release it before returning. > > > > Fixes: 0062e7cc955e0 ("ixgbevf: add VF IPsec offload code") > > Cc: [email protected] > > Signed-off-by: Wentao Liang <[email protected]> > > --- > > drivers/net/ethernet/intel/ixgbevf/ipsec.c | 4 +++- > > 1 file changed, 3 insertions(+), 1 deletion(-) > > > > Reviewed-by: Joe Damato <[email protected]>
Tested-by: Rafal Romanowski <[email protected]>
