Oliver Neukum e7f39d0aa2 UPSTREAM: sr9700: sanity check for packet length ...

[ Upstream commit e9da0b56fe ]

A malicious device can leak heap data to user space
providing bogus frame lengths. Introduce a sanity check.

Bug: 225469258
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Reviewed-by: Grant Grundler <grundler@chromium.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Change-Id: I2f17bd57b5c4228d0420f716527316a878a34efd

2022-03-24 10:49:22 +00:00

..

appletalk

net: appletalk: cops: Fix data race in cops_probe1

2021-06-16 12:01:37 +02:00

arcnet

…

bonding

bonding: pair enable_port with slave_arr_updates

2022-02-16 12:54:25 +01:00

caif

net: caif: fix memory leak in ldisc_open

2021-06-30 08:47:21 -04:00

can

can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message

2022-01-27 10:54:28 +01:00

dsa

net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister

2022-02-16 12:54:27 +01:00

ethernet

Merge 5.10.101 into android12-5.10-lts

2022-02-16 15:16:06 +01:00

fddi

net: fddi: fix UAF in fza_probe

2021-07-25 14:36:20 +02:00

fjes

fjes: Check for error irq

2021-12-29 12:25:57 +01:00

hamradio

yam: fix a memory leak in yam_siocdevprivate()

2022-02-01 17:25:47 +01:00

hippi

…

hyperv

hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive()

2021-02-17 11:02:26 +01:00

ieee802154

net: ieee802154: ca8210: Stop leaking skb's

2022-02-08 18:30:37 +01:00

ipa

net: ipa: prevent concurrent replenish

2022-02-05 12:37:55 +01:00

ipvlan

…

mdio

net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE

2022-02-16 12:54:26 +01:00

netdevsim

netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc

2021-12-22 09:30:55 +01:00

pcs

net: pcs-xpcs: depend on MDIO_BUS instead of selecting it

2020-10-16 16:54:11 -07:00

phy

net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs

2022-02-16 12:54:17 +01:00

plip

…

ppp

ppp: ensure minimum packet size in ppp_write()

2022-01-27 10:54:01 +01:00

slip

…

team

team: protect features update by RCU to avoid deadlock

2021-02-03 23:28:51 +01:00

usb

UPSTREAM: sr9700: sanity check for packet length

2022-03-24 10:49:22 +00:00

vmxnet3

vmxnet3: do not stop tx queues after netif_device_detach()

2021-11-18 14:03:43 +01:00

wan

net: lapbether: Prevent racing when checking whether the netif is running

2021-05-14 09:50:29 +02:00

wimax

staging: wimax/i2400m: fix byte-order issue

2021-05-11 14:47:16 +02:00

wireguard

wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()

2021-12-08 09:03:23 +01:00

wireless

Merge tag 'android12-5.10.101_r00' into android12-5.10

2022-03-21 14:29:02 +01:00

xen-netback

xen/netback: don't queue unlimited number of packages

2021-12-22 09:31:00 +01:00

bareudp.c

bareudp: Fix invalid read beyond skb's linear data

2021-08-18 08:59:11 +02:00

dummy.c

…

eql.c

…

geneve.c

net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb

2021-05-14 09:50:43 +02:00

gtp.c

net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending

2021-03-04 11:38:46 +01:00

ifb.c

ifb: fix building without CONFIG_NET_CLS_ACT

2021-11-18 14:03:49 +01:00

Kconfig

Merge 5.10.80 into android12-5.10-lts

2021-11-19 11:50:41 +01:00

LICENSE.SRC

…

loopback.c

…

macsec.c

net: macsec: Verify that send_sci is on when setting Tx sci explicitly

2022-02-08 18:30:38 +01:00

macvlan.c

…

macvtap.c

…

Makefile

…

mdio.c

…

mii.c

…

net_failover.c

…

netconsole.c

…

nlmon.c

…

ntb_netdev.c

…

rionet.c

…

sb1000.c

…

Space.c

…

sungem_phy.c

…

tap.c

net: fix dev_ifsioc_locked() race condition

2021-03-07 12:34:07 +01:00

thunderbolt.c

…

tun.c

tun: fix bonding active backup with arp monitoring

2021-11-26 10:39:18 +01:00

veth.c

veth: fix races around rq->rx_notify_masked

2022-02-16 12:54:26 +01:00

virtio_net.c

Merge 5.10.61 into android12-5.10-lts

2021-08-27 20:51:37 +02:00

vrf.c

vrf: don't run conntrack on vrf with !dflt qdisc

2021-12-14 11:32:36 +01:00

vsockmon.c

…

vxlan.c

vxlan: add missing rcu_read_lock() in neigh_reduce()

2021-07-14 16:56:25 +02:00

xen-netfront.c

xen/netfront: harden netfront against event channel storms

2021-12-22 09:30:59 +01:00