Dan Carpenter 4b977e2916 net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() ...

[ Upstream commit e7e7104e2d ]

The "fsp->location" variable comes from user via ethtool_get_rxnfc().
Check that it is valid to prevent an out of bounds read.

Fixes: 7aab747e55 ("net: ethernet: mediatek: add ethtool functions to configure RX flows of HW LRO")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-06-29 09:26:23 +09:00

..

appletalk

net: appletalk: cops: Fix data race in cops_probe1

2023-05-16 11:13:16 +09:00

arcnet

net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()

2023-05-16 12:44:39 +09:00

bonding

bonding: pair enable_port with slave_arr_updates

2023-05-16 12:42:04 +09:00

caif

net: caif: fix memory leak in ldisc_open

2023-05-16 11:16:12 +09:00

can

can: grcan: only use the NAPI poll budget for RX

2023-06-29 09:26:14 +09:00

cris

…

dsa

net: dsa: b53: Fix calculating number of switch ports

2023-05-16 11:47:07 +09:00

ethernet

net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()

2023-06-29 09:26:23 +09:00

fddi

FDDI: defxx: Make MMIO the configuration default except for EISA

2023-05-16 11:04:32 +09:00

fjes

fjes: Check for error irq

2023-05-16 12:29:13 +09:00

hamradio

drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()

2023-06-29 09:26:00 +09:00

hippi

drivers: net: hippi: Fix deadlock in rr_close()

2023-06-29 09:26:12 +09:00

hyperv

hv_netvsc: Fix IP header checksum for coalesced packets

2023-05-15 11:49:53 +09:00

ieee802154

net: ieee802154: at86rf230: Stop leaking skb's

2023-05-16 12:42:47 +09:00

ipvlan

ipvlan: fix device features

2023-05-16 08:56:31 +09:00

irda

…

phy

net: phy: broadcom: Fix brcm_fet_config_init()

2023-06-29 09:26:04 +09:00

plip

…

ppp

ppp: ensure minimum packet size in ppp_write()

2023-05-16 12:31:34 +09:00

slip

drivers: net: slip: fix NPD bug in sl_tx_timeout()

2023-06-29 09:26:09 +09:00

team

net: team: fix memory leak in __team_options_register

2023-05-16 09:24:17 +09:00

usb

net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990

2023-05-16 12:44:19 +09:00

vmxnet3

net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()

2023-06-29 09:26:16 +09:00

wan

net: lapbether: Prevent racing when checking whether the netif is running

2023-05-16 11:02:50 +09:00

wimax

staging: wimax/i2400m: fix byte-order issue

2023-05-16 10:53:47 +09:00

wireless

carl9170: tx: fix an incorrect use of list iterator

2023-06-29 09:26:22 +09:00

xen-netback

Revert "xen-netback: Check for hotplug-status existence before watching"

2023-05-16 12:46:03 +09:00

dummy.c

…

eql.c

…

geneve.c

geneve: add transport ports in route lookup for geneve

2023-05-16 09:47:13 +09:00

gtp.c

net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending

2023-05-16 10:39:14 +09:00

ifb.c

…

Kconfig

…

LICENSE.SRC

…

loopback.c

…

macsec.c

net: macsec: Verify that send_sci is on when setting Tx sci explicitly

2023-05-16 12:35:30 +09:00

macvlan.c

macvlan: Skip loopback packets in RX handler

2023-05-15 17:33:57 +09:00

macvtap.c

…

Makefile

…

mdio.c

…

mii.c

…

netconsole.c

…

nlmon.c

…

ntb_netdev.c

ntb_netdev: fix sleep time mismatch

2023-05-15 15:18:33 +09:00

rionet.c

rapidio/rionet: do not free skb before reading its length

2023-05-15 10:05:03 +09:00

sb1000.c

…

Space.c

…

sungem_phy.c

…

tun.c

tun: fix bonding active backup with arp monitoring

2023-05-16 12:16:32 +09:00

veth.c

veth: Ensure eth header is in skb's linear part

2023-06-29 09:26:08 +09:00

virtio_net.c

virtio_net: Fix recursive call to cpus_read_lock()

2023-05-16 10:25:04 +09:00

vrf.c

vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit

2023-05-16 12:21:32 +09:00

vxlan.c

vxlan: fix error return code in vxlan_fdb_append

2023-06-29 09:26:10 +09:00

xen-netfront.c

xen/netfront: react properly to failing gnttab_end_foreign_access_ref()

2023-05-16 12:45:43 +09:00