diff options
| author | Ahmed Zaki <[email protected]> | 2024-06-14 13:18:42 +0000 |
|---|---|---|
| committer | Tony Nguyen <[email protected]> | 2024-07-23 22:26:41 +0000 |
| commit | 6ebbe97a488179f5dc85f2f1e0c89b486e99ee97 (patch) | |
| tree | b2af4165ff72155aea1fcc54717c30a5543f1767 /drivers/net/ethernet/intel/ice/ice_switch.c | |
| parent | net: bonding: correctly annotate RCU in bond_should_notify_peers() (diff) | |
| download | kernel-6ebbe97a488179f5dc85f2f1e0c89b486e99ee97.tar.gz kernel-6ebbe97a488179f5dc85f2f1e0c89b486e99ee97.zip | |
ice: Add a per-VF limit on number of FDIR filters
While the iavf driver adds a s/w limit (128) on the number of FDIR
filters that the VF can request, a malicious VF driver can request more
than that and exhaust the resources for other VFs.
Add a similar limit in ice.
CC: [email protected]
Fixes: 1f7ea1cd6a37 ("ice: Enable FDIR Configure for AVF")
Reviewed-by: Przemek Kitszel <[email protected]>
Suggested-by: Sridhar Samudrala <[email protected]>
Signed-off-by: Ahmed Zaki <[email protected]>
Reviewed-by: Wojciech Drewek <[email protected]>
Tested-by: Rafal Romanowski <[email protected]>
Signed-off-by: Tony Nguyen <[email protected]>
Diffstat (limited to 'drivers/net/ethernet/intel/ice/ice_switch.c')
0 files changed, 0 insertions, 0 deletions