Szymon Heidrich e294f0aa47 net: usb: smsc75xx: Limit packet length to skb->len ...

[ Upstream commit d8b228318935044dafe3a5bc07ee71a1f1424b8d ]

Packet length retrieved from skb data may be larger than
the actual socket buffer length (up to 9026 bytes). In such
case the cloned skb passed up the network stack will leak
kernel memory contents.

Fixes: d0cad87170 ("smsc75xx: SMSC LAN75xx USB gigabit ethernet adapter driver")
Signed-off-by: Szymon Heidrich <szymon.heidrich@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-03-22 13:29:58 +01:00

..

aqc111.c

net: usb: aqc111: Fix out-of-bounds accesses in RX fixup

2022-04-20 09:23:23 +02:00

aqc111.h

…

asix_common.c

…

asix_devices.c

…

asix.h

…

ax88172a.c

…

ax88179_178a.c

Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP"

2022-08-21 15:16:25 +02:00

catc.c

…

cdc_eem.c

…

cdc_ether.c

r8152: add PID for the Lenovo OneLink+ Dock

2022-10-30 09:41:16 +01:00

cdc_mbim.c

…

cdc_ncm.c

…

cdc_subset.c

…

cdc-phonet.c

…

ch9200.c

…

cx82310_eth.c

…

dm9601.c

…

gl620a.c

…

hso.c

…

huawei_cdc_ncm.c

…

int51x1.c

…

ipheth.c

…

kalmia.c

net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path

2023-02-22 12:55:57 +01:00

kaweth.c

…

Kconfig

…

lan78xx.c

net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver

2023-03-17 08:45:11 +01:00

lan78xx.h

…

lg-vl600.c

…

Makefile

…

mcs7830.c

…

net1080.c

…

pegasus.c

…

pegasus.h

…

plusb.c

net: USB: Fix wrong-direction WARNING in plusb.c

2023-02-15 17:22:26 +01:00

qmi_wwan.c

net: usb: qmi_wwan: add u-blox 0x1342 composition

2022-12-14 11:31:54 +01:00

r8152.c

r8152: add PID for the Lenovo OneLink+ Dock

2022-10-30 09:41:16 +01:00

rndis_host.c

usb: rndis_host: Secure rndis_query check against int overflow

2023-01-14 10:16:48 +01:00

rtl8150.c

…

sierra_net.c

…

smsc75xx.c

net: usb: smsc75xx: Limit packet length to skb->len

2023-03-22 13:29:58 +01:00

smsc75xx.h

…

smsc95xx.c

usbnet: smsc95xx: Fix deadlock on runtime resume

2022-11-25 17:45:54 +01:00

smsc95xx.h

…

sr9700.c

net: usb: sr9700: Handle negative len

2023-02-01 08:23:13 +01:00

sr9700.h

…

sr9800.c

…

sr9800.h

…

usbnet.c

usbnet: Fix memory leak in usbnet_disconnect()

2022-10-05 10:38:42 +02:00

zaurus.c

…