From 32420e9c27220fb2d6264d7cb6dfecbc1e16cd79 Mon Sep 17 00:00:00 2001 From: Trevor Gibson Date: Tue, 21 Apr 2026 18:49:06 -0700 Subject: [PATCH] net: vitesse: fix skb data corruption on bridge broadcast flood Replace the skb_headroom() check with skb_cow_head(), which both ensures sufficient headroom and copies the shared data buffer into a private one when the skb is cloned --- drivers/net/ethernet/vitesse/vtss_if_mux_dev.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/net/ethernet/vitesse/vtss_if_mux_dev.c b/drivers/net/ethernet/vitesse/vtss_if_mux_dev.c index 9eaf8f3c0030..13b47aca385a 100644 --- a/drivers/net/ethernet/vitesse/vtss_if_mux_dev.c +++ b/drivers/net/ethernet/vitesse/vtss_if_mux_dev.c @@ -99,7 +99,7 @@ static int internal_dev_xmit(struct sk_buff *skb, struct net_device *netdev) { goto DO_CNT; } - if (skb_headroom(skb) < ifh_encap_len) { + if (skb_cow_head(skb, ifh_encap_len)) { tx_ok = 0; pr_info("Not enough room for VTSS-header: %u\n", skb_headroom(skb));