]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
usbnet: ipheth: fix DPE OoB read
authorFoster Snowhill <forst@pen.gy>
Sat, 25 Jan 2025 23:54:08 +0000 (00:54 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 17 Feb 2025 09:05:16 +0000 (10:05 +0100)
commit5835bf66c50ac2b85ed28b282c2456c3516ef0a6
tree9278e46e290a2290b97fee3c7f3f1cf4f94e57cf
parentc0912ae6586e61d6b83755aed681c56f41eb33dd
usbnet: ipheth: fix DPE OoB read

commit ee591f2b281721171896117f9946fced31441418 upstream.

Fix an out-of-bounds DPE read, limit the number of processed DPEs to
the amount that fits into the fixed-size NDP16 header.

Fixes: a2d274c62e44 ("usbnet: ipheth: add CDC NCM support")
Cc: stable@vger.kernel.org
Signed-off-by: Foster Snowhill <forst@pen.gy>
Reviewed-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/usb/ipheth.c