]> git.ipfire.org Git - thirdparty/linux.git/commit
leds: uleds: Fix potential buffer overread
authorArmin Wolf <W_Armin@gmx.de>
Sun, 24 May 2026 23:55:53 +0000 (01:55 +0200)
committerLee Jones <lee@kernel.org>
Wed, 17 Jun 2026 10:30:08 +0000 (11:30 +0100)
commitc19fe864f667afc49d1391d764e20b66555bcf7a
treeaee49e33ae67535e1fd646d434e1b9378307645d
parenta031b5fce5265938912d66047ec12b2208dd868f
leds: uleds: Fix potential buffer overread

The name string supplied by userspace is not guaranteed to be
null-terminated, so using strchr() on it might result in a buffer
overread. The same thing will happen when said string is used by
the LED class device.

Fix this by using strnchr() instead and explicitly check that
the name string is properly null-terminated.

Cc: stable@vger.kernel.org
Fixes: e381322b0190 ("leds: Introduce userspace LED class driver")
Signed-off-by: Armin Wolf <W_Armin@gmx.de>
Link: https://patch.msgid.link/20260524235553.189134-1-W_Armin@gmx.de
Signed-off-by: Lee Jones <lee@kernel.org>
drivers/leds/uleds.c