]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
USB: serial: digi_acceleport: fix memory corruption with small endpoints
authorJohan Hovold <johan@kernel.org>
Wed, 20 May 2026 14:26:22 +0000 (16:26 +0200)
committerJohan Hovold <johan@kernel.org>
Wed, 20 May 2026 14:26:22 +0000 (16:26 +0200)
commitcb3560e8eab1dfa1cac1ed52631adf8ec6ff2cd5
treeb13d1b1f76a2edbedbcf3cd267e772f544827918
parent4ce058df2ee02cc2a0f0fd5cd64ce6f1482a0b65
USB: serial: digi_acceleport: fix memory corruption with small endpoints

Add the missing bulk-out buffer size sanity checks to avoid
out-of-bounds memory accesses or slab corruption should a malicious
device report smaller buffers than expected.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
drivers/usb/serial/digi_acceleport.c