Re: [PATCH net v2] macsec: prevent AES-GCM nonce reuse after packet number wrap

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net-next.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Thu,  8 Oct 2026 08:06:26 +0000 you wrote:
> After allocating the last valid packet number, MACsec wraps next_pn to
> zero and deactivates the transmit SA. This happens for both 32- and
> 64-bit types of packet numbers (at values 0xffffffff and
> 0xffffffffffffffff, respectively).
> 
> TX packets that were still getting processed during deactivation keep
> being processed and then receive packet numbers. The first gets 0 and
> is correctly dropped, but next_pn is incremented to 1, which makes the
> next packet take number 1. It then does not get dropped and may induce
> a reuse of the AES-GCM nonce corresponding to value 1.
> 
> [...]

Here is the summary with links:
  - [net,v2] macsec: prevent AES-GCM nonce reuse after packet number wrap
    https://git.kernel.org/netdev/net-next/c/94d51c59f0a8

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html