[PATCH] net/bnxt: fix hash seeding and hot-upgrade lock handling
Stephen Hemminger
stephen at networkplumber.org
Mon Oct 5 23:05:06 CEST 2026
On Mon, 5 Oct 2026 15:25:19 -0500
Manish Kurup <manish.kurup at broadcom.com> wrote:
> +
> + /* Random per-table seed so the CRC hash cannot be predicted offline
> + * from attacker-controlled flow match fields.
> + */
> + hash_tbl->hash_seed = (uint32_t)rte_rand();
> +
No, the current rte_rand() is poor choice for anything hackers would want to know.
Need to use getentropy here. There is a patch series to make rte_rand() better but
if you are trying to prevent DoS then need to use something stronger.
More information about the dev
mailing list