]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
libceph: prevent potential out-of-bounds reads in handle_auth_done()
authorziming zhang <ezrakiez@gmail.com>
Thu, 11 Dec 2025 08:52:58 +0000 (16:52 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 19 Jan 2026 12:10:14 +0000 (13:10 +0100)
commit194cfe2af4d2a1de599d39dad636b47c2f6c2c96
tree309e07116c116bf79e92e4e8b68400203a0928cf
parenta3827e310b5a73535646ef4a552d53b3c8bf74f6
libceph: prevent potential out-of-bounds reads in handle_auth_done()

commit 818156caffbf55cb4d368f9c3cac64e458fb49c9 upstream.

Perform an explicit bounds check on payload_len to avoid a possible
out-of-bounds access in the callout.

[ idryomov: changelog ]

Cc: stable@vger.kernel.org
Signed-off-by: ziming zhang <ezrakiez@gmail.com>
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/ceph/messenger_v2.c