]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()
authorDavid Howells <dhowells@redhat.com>
Wed, 8 Apr 2026 12:12:47 +0000 (13:12 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 18 Apr 2026 08:46:48 +0000 (10:46 +0200)
commit1c4422d8be81718ecb15d79aedff607323085201
treeeee0b61b97d77a50a4c2dfb529b5a28acba672b9
parent1bd3d01378c1f9ecd313d394b51c808c1f418615
rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()

commit f564af387c8c28238f8ebc13314c589d7ba8475d upstream.

Fix rxgk_do_verify_authenticator() to check the buffer size before checking
the nonce.

Fixes: 9d1d2b59341f ("rxrpc: rxgk: Implement the yfs-rxgk security class (GSSAPI)")
Closes: https://sashiko.dev/#/patchset/20260401105614.1696001-10-dhowells@redhat.com
Signed-off-by: David Howells <dhowells@redhat.com>
cc: Marc Dionne <marc.dionne@auristor.com>
cc: Jeffrey Altman <jaltman@auristor.com>
cc: Simon Horman <horms@kernel.org>
cc: linux-afs@lists.infradead.org
cc: stable@kernel.org
Link: https://patch.msgid.link/20260408121252.2249051-20-dhowells@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/rxrpc/rxgk.c