[PATCH] net/bnxt: fix hash seeding and hot-upgrade lock handling

Stephen Hemminger stephen at networkplumber.org
Mon Oct 5 23:05:06 CEST 2026


On Mon,  5 Oct 2026 15:25:19 -0500
Manish Kurup <manish.kurup at broadcom.com> wrote:

> +
> +	/* Random per-table seed so the CRC hash cannot be predicted offline
> +	 * from attacker-controlled flow match fields.
> +	 */
> +	hash_tbl->hash_seed = (uint32_t)rte_rand();
> +

No, the current rte_rand() is poor choice for anything hackers would want to know.
Need to use getentropy here. There is a patch series to make rte_rand() better but
if you are trying to prevent DoS then need to use something stronger.


More information about the dev mailing list