]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
mac80211: fix memory corruption in EAPOL handling
authorDavis Mosenkovs <davis@mosenkovs.lv>
Sat, 10 Jul 2021 18:37:10 +0000 (21:37 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 20 Jul 2021 14:22:39 +0000 (16:22 +0200)
commit82d0a11424be122df8437f0d84d7faa48fef076f
tree54d0de88792bee8297de9ba6bbb64963d01c69fd
parent9c47fa9295ce58433cae4376240b738b126637d4
mac80211: fix memory corruption in EAPOL handling

Commit e3d4030498c3 ("mac80211: do not accept/forward invalid EAPOL
frames") uses skb_mac_header() before eth_type_trans() is called
leading to incorrect pointer, the pointer gets written to. This issue
has appeared during backporting to 4.4, 4.9 and 4.14.

Fixes: e3d4030498c3 ("mac80211: do not accept/forward invalid EAPOL frames")
Link: https://lore.kernel.org/r/CAHQn7pKcyC_jYmGyTcPCdk9xxATwW5QPNph=bsZV8d-HPwNsyA@mail.gmail.com
Cc: <stable@vger.kernel.org> # 4.4.x
Signed-off-by: Davis Mosenkovs <davis@mosenkovs.lv>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/mac80211/rx.c