iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/net/usb
History
Szymon Heidrich 7bf0eac3fd net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull 
[ Upstream commit 43ffe6caccc7a1bb9d7442fbab521efbf6c1378c ]

Packet length check needs to be located after size and align_count
calculation to prevent kernel panic in skb_pull() in case
rx_cmd_a & RX_CMD_A_RED evaluates to true.

Fixes: d8b228318935 ("net: usb: smsc75xx: Limit packet length to skb->len")
Signed-off-by: Szymon Heidrich <szymon.heidrich@gmail.com>
Link: https://lore.kernel.org/r/20230316110540.77531-1-szymon.heidrich@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-03-22 13:31:28 +01:00
..
aqc111.c
…
aqc111.h
…
asix_common.c
net: asix: fix "can't send until first packet is send" issue
2022-07-07 17:53:27 +02:00
asix_devices.c
…
asix.h
net: usb: asix: do not force pause frames support
2022-07-07 17:53:26 +02:00
ax88172a.c
…
ax88179_178a.c
Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP"
2022-08-17 14:24:31 +02:00
catc.c
…
cdc_eem.c
…
cdc_ether.c
net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem
2023-02-01 08:27:16 +01:00
cdc_mbim.c
…
cdc_ncm.c
…
cdc_subset.c
…
cdc-phonet.c
…
ch9200.c
…
cx82310_eth.c
…
dm9601.c
…
gl620a.c
…
hso.c
…
huawei_cdc_ncm.c
…
int51x1.c
…
ipheth.c
…
kalmia.c
net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
2023-02-22 12:57:09 +01:00
kaweth.c
…
Kconfig
net: usb: make USB_RTL8153_ECM non user configurable
2022-08-17 14:23:37 +02:00
lan78xx.c
net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver
2023-03-17 08:48:54 +01:00
lan78xx.h
…
lg-vl600.c
…
Makefile
…
mcs7830.c
…
net1080.c
…
pegasus.c
…
pegasus.h
…
plusb.c
net: USB: Fix wrong-direction WARNING in plusb.c
2023-02-14 19:18:02 +01:00
qmi_wwan.c
net: usb: qmi_wwan: add u-blox 0x1342 composition
2022-12-14 11:37:17 +01:00
r8152.c
r8152: add vendor/device ID pair for Microsoft Devkit
2023-02-01 08:27:18 +01:00
r8153_ecm.c
…
rndis_host.c
usb: rndis_host: Secure rndis_query check against int overflow
2023-01-12 11:59:16 +01:00
rtl8150.c
…
sierra_net.c
…
smsc75xx.c
net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull
2023-03-22 13:31:28 +01:00
smsc75xx.h
…
smsc95xx.c
Revert "usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling"
2022-08-31 17:16:49 +02:00
smsc95xx.h
…
sr9700.c
net: usb: sr9700: Handle negative len
2023-02-01 08:27:10 +01:00
sr9700.h
…
sr9800.c
…
sr9800.h
…
usbnet.c
usbnet: Fix memory leak in usbnet_disconnect()
2022-10-05 10:39:42 +02:00
zaurus.c
…