Szymon Heidrich 2cc46ed406 net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull ...

[ Upstream commit 43ffe6caccc7a1bb9d7442fbab521efbf6c1378c ]

Packet length check needs to be located after size and align_count
calculation to prevent kernel panic in skb_pull() in case
rx_cmd_a & RX_CMD_A_RED evaluates to true.

Fixes: d8b228318935 ("net: usb: smsc75xx: Limit packet length to skb->len")
Signed-off-by: Szymon Heidrich <szymon.heidrich@gmail.com>
Link: https://lore.kernel.org/r/20230316110540.77531-1-szymon.heidrich@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-03-22 13:30:00 +01:00

..

aqc111.c

net: usb: aqc111: Fix out-of-bounds accesses in RX fixup

2022-04-20 09:23:23 +02:00

aqc111.h

…

asix_common.c

…

asix_devices.c

…

asix.h

…

ax88172a.c

…

ax88179_178a.c

Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP"

2022-08-21 15:16:25 +02:00

catc.c

…

cdc_eem.c

net: cdc_eem: fix tx fixup skb leak

2021-06-23 14:42:47 +02:00

cdc_ether.c

r8152: add PID for the Lenovo OneLink+ Dock

2022-10-30 09:41:16 +01:00

cdc_mbim.c

net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990

2022-03-08 19:09:30 +01:00

cdc_ncm.c

CDC-NCM: avoid overflow in sanity checking

2022-03-02 11:42:47 +01:00

cdc_subset.c

…

cdc-phonet.c

…

ch9200.c

…

cx82310_eth.c

…

dm9601.c

…

gl620a.c

…

hso.c

usb: hso: remove the bailout parameter

2021-10-06 15:56:02 +02:00

huawei_cdc_ncm.c

…

int51x1.c

…

ipheth.c

ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback

2022-02-05 12:37:56 +01:00

kalmia.c

net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path

2023-02-22 12:55:57 +01:00

kaweth.c

…

Kconfig

lan78xx: select CRC32

2021-10-27 09:56:48 +02:00

lan78xx.c

net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver

2023-03-17 08:45:11 +01:00

lan78xx.h

…

lg-vl600.c

…

Makefile

…

mcs7830.c

net: mcs7830: handle usb read errors properly

2022-01-27 10:54:04 +01:00

net1080.c

…

pegasus.c

net: usb: pegasus: Do not drop long Ethernet frames

2022-01-05 12:40:30 +01:00

pegasus.h

…

plusb.c

net: USB: Fix wrong-direction WARNING in plusb.c

2023-02-15 17:22:26 +01:00

qmi_wwan.c

net: usb: qmi_wwan: add u-blox 0x1342 composition

2022-12-14 11:31:54 +01:00

r8152.c

r8152: add PID for the Lenovo OneLink+ Dock

2022-10-30 09:41:16 +01:00

rndis_host.c

usb: rndis_host: Secure rndis_query check against int overflow

2023-01-14 10:16:48 +01:00

rtl8150.c

…

sierra_net.c

…

smsc75xx.c

net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull

2023-03-22 13:30:00 +01:00

smsc75xx.h

…

smsc95xx.c

usbnet: smsc95xx: Fix deadlock on runtime resume

2022-11-25 17:45:54 +01:00

smsc95xx.h

…

sr9700.c

net: usb: sr9700: Handle negative len

2023-02-01 08:23:13 +01:00

sr9700.h

…

sr9800.c

…

sr9800.h

…

usbnet.c

usbnet: Fix memory leak in usbnet_disconnect()

2022-10-05 10:38:42 +02:00

zaurus.c

USB: zaurus: support another broken Zaurus

2022-03-02 11:42:47 +01:00