Messages in this thread | | | Date | Thu, 16 Mar 2023 13:52:37 -0700 | From | Jakub Kicinski <> | Subject | Re: [PATCH v2] net: usb: smsc95xx: Limit packet length to skb->len |
| |
On Thu, 16 Mar 2023 11:19:54 +0100 Szymon Heidrich wrote: > Packet length retrieved from descriptor may be larger than > the actual socket buffer length. In such case the cloned > skb passed up the network stack will leak kernel memory contents. > > Fixes: 2f7ca802bdae ("net: Add SMSC LAN9500 USB2.0 10/100 ethernet adapter driver") > Signed-off-by: Szymon Heidrich <szymon.heidrich@gmail.com>
Reviewed-by: Jakub Kicinski <kuba@kernel.org>
| |