[PATCH v3] common/cnxk: validate cipher key length

[Jerin Jacob]

On Thu, Mar 19, 2026 at 3:20 PM Tejasree Kondoj <ktejasree at marvell.com> wrote:
>
> Validate DES/3DES and AES key lengths before copying
> into SA cipher_key[] to avoid out-of-bounds write
> into adjacent IV/salt fields.
>
> Fixes: 24d10645bdfb ("common/cnxk: support CN20K IPsec session")
> Cc: stable at dpdk.org
>
> Signed-off-by: Tejasree Kondoj <ktejasree at marvell.com>

Updated the git commit as follows and applied to
dpdk-next-net-mrvl/for-main. Thanks

    common/cnxk: fix cipher key length validation

    Validate DES/3DES and AES key lengths before copying
    into SA cipher_key[] to avoid out-of-bounds write
    into adjacent IV/salt fields.

    Fixes: 24d10645bdfb ("common/cnxk: support CN20K IPsec session")
    Cc: stable at dpdk.org

    Signed-off-by: Tejasree Kondoj <ktejasree at marvell.com>