diff --git a/hw-net-rocker-fix-security-vulnerability.patch b/hw-net-rocker-fix-security-vulnerability.patch
new file mode 100644
index 0000000..c841e97
--- /dev/null
+++ b/hw-net-rocker-fix-security-vulnerability.patch
@@ -0,0 +1,28 @@
+From 9a8de722b047ba66f70e87fb29b877935c187457 Mon Sep 17 00:00:00 2001
+From: Lichang Zhao <zhaolichang@huawei.com>
+Date: Thu, 10 Feb 2022 16:54:06 +0800
+Subject: [PATCH] hw/net/rocker: fix security vulnerability
+
+fix security vulnerability
+
+Signed-off-by: Lichang zhao <zhaolichang@huawei.com>
+Signed-off-by: Jinhao Gao <gaojinhao@huawei.com>
+---
+ hw/net/rocker/rocker_of_dpa.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/hw/net/rocker/rocker_of_dpa.c b/hw/net/rocker/rocker_of_dpa.c
+index b3b8c5bb6d..8ac26e6beb 100644
+--- a/hw/net/rocker/rocker_of_dpa.c
++++ b/hw/net/rocker/rocker_of_dpa.c
+@@ -2070,6 +2070,7 @@ static int of_dpa_cmd_add_l2_flood(OfDpa *of_dpa, OfDpaGroup *group,
+ err_out:
+     group->l2_flood.group_count = 0;
+     g_free(group->l2_flood.group_ids);
++    group->l2_flood.group_ids = NULL;
+     g_free(tlvs);
+ 
+     return err;
+-- 
+2.27.0
+