]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
USB: serial: mxuport: validate firmware header size
authorPengpeng Hou <pengpeng@iscas.ac.cn>
Mon, 20 Jul 2026 11:52:20 +0000 (19:52 +0800)
committerJohan Hovold <johan@kernel.org>
Mon, 20 Jul 2026 14:24:04 +0000 (16:24 +0200)
commit52beeed5e5d257e1da3e2d2f2fb25bc1e3cdb6d2
tree33e56d9d976d1ff9685cd6a3ff9119ab188d892a
parentfad0fd120e29041b3e6cdf41bb12e3184fb524a2
USB: serial: mxuport: validate firmware header size

mxuport_probe() reads version bytes at fixed offsets after
request_firmware() succeeds. Firmware loading success does not prove that
the blob reaches the highest version offset.

Reject short firmware images before reading the version bytes. This is
source-level parser hardening; no affected device or crash was observed.

Reviewed-by: Andrew Lunn <andrew@lunn.ch>
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Fixes: ee467a1f2066 ("USB: serial: add Moxa UPORT 12XX/14XX/16XX driver")
Signed-off-by: Johan Hovold <johan@kernel.org>
drivers/usb/serial/mxuport.c