Oliver Neukum
84f2e5b3e7
usb: aqc111: check packet for fixup for true limit
...
[ Upstream commit ccab434e674ca95d483788b1895a70c21b7f016a ]
If a device sends a packet that is inbetween 0
and sizeof(u64) the value passed to skb_trim()
as length will wrap around ending up as some very
large value.
The driver will then proceed to parse the header
located at that position, which will either oops or
process some random value.
The fix is to check against sizeof(u64) rather than
0, which the driver currently does. The issue exists
since the introduction of the driver.
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-12-20 15:41:19 +01:00
..
appletalk
arcnet
arcnet: restoring support for multiple Sohard Arcnet cards
2023-12-13 18:18:12 +01:00
bonding
bonding: stop the device in bond_setup_by_slave()
2023-11-28 16:50:16 +00:00
caif
can
can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
2023-11-20 10:30:09 +01:00
dsa
net: dsa: lan9303: consequently nested-lock physical MDIO
2023-11-28 16:50:21 +00:00
ethernet
net: stmmac: Handle disabled MDIO busses from devicetree
2023-12-20 15:41:18 +01:00
fddi
fjes
hamradio
hippi
hyperv
hv_netvsc: rndis_filter needs to select NLS
2023-12-13 18:18:12 +01:00
ieee802154
net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show()
2023-11-08 11:23:35 +01:00
ipvlan
ipvlan: add ipvlan_route_v6_outbound() helper
2023-11-28 16:50:16 +00:00
netdevsim
phy
net: phy: broadcom: stub c45 read/write for 54810
2023-08-30 16:27:20 +02:00
plip
ppp
ppp: limit MRU to 64K
2023-11-28 16:50:16 +00:00
slip
team
team: fix null-ptr-deref when team device type is changed
2023-10-10 21:46:37 +02:00
usb
usb: aqc111: check packet for fixup for true limit
2023-12-20 15:41:19 +01:00
vmxnet3
wan
drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close()
2023-10-10 21:46:43 +02:00
wimax
wireless
wifi: iwlwifi: Use FW rate for non-data frames
2023-11-28 16:50:16 +00:00
xen-netback
xen-netback: use default TX queue size for vifs
2023-10-25 11:53:18 +02:00
dummy.c
eql.c
geneve.c
gtp.c
gtp: fix fragmentation needed check with gso
2023-11-08 11:23:36 +01:00
ifb.c
Kconfig
LICENSE.SRC
loopback.c
macsec.c
net: add DEV_STATS_READ() helper
2023-11-20 10:30:10 +01:00
macvlan.c
macvlan: Don't propagate promisc change to lower dev in passthru
2023-11-28 16:50:17 +00:00
macvtap.c
Makefile
mdio.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c
net: tap_open(): set sk_uid from current_fsuid()
2023-08-11 11:53:59 +02:00
thunderbolt.c
net: thunderbolt: Fix TCPv6 GSO checksum calculation
2023-10-10 21:46:41 +02:00
tun.c
tun: prevent negative ifindex
2023-10-25 11:53:21 +02:00
veth.c
veth: Fixing transmit return status for dropped packets
2023-09-23 10:59:58 +02:00
virtio_net.c
virtio-net: set queues after driver_ok
2023-08-30 16:27:19 +02:00
vrf.c
vsockmon.c
vxlan.c
vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
2023-09-23 10:59:38 +02:00
xen-netfront.c