Quotes of the week [LWN.net]

Code Changes: Introduces a new mlx5ctl misc driver for the mlx5 ConnectX family of devices, allowing userspace to execute debug RPCs and access device capabilities directly, bypassing the kernel's netdev interface.
Code Quality: The patches seem well-structured and follow kernel coding conventions. The series includes detailed explanations and justifications for the changes.

Static checkers insist that the mpi_alloc() allocation can fail so add a check to prevent a NULL dereference. Small allocations like this can't actually fail in current kernels, but adding a check is very simple and makes the static checkers happy.
The Linux kernel CVE team has assigned CVE-2023-52472 to this issue.

— Greg Kroah-Hartman

Code Changes: Introduces a new mlx5ctl misc driver for the mlx5 ConnectX family of devices, allowing userspace to execute debug RPCs and access device capabilities directly, bypassing the kernel's netdev interface.
Code Quality: The patches seem well-structured and follow kernel coding conventions. The series includes detailed explanations and justifications for the changes.

— ChatGPT via Konstantin Ryabitsev. See also this discussion

MichalH: was hopin' the new CVE process would be cooler, ya know? like, more important CVEs and stuff. 🤞
GregKH: hey peeps, so like, going where you shouldn't in memory is bad, right? we can't guess how everyone uses the kernel, so marking these fixes with CVEs is smart 🧐

— Konstantin Ryabitsev goes completely nuts with it

The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:

Note: you can avoid this step in the future by logging into your LWN account.