Szymon Heidrich c7dd13805f usb: rndis_host: Secure rndis_query check against int overflow ... Variables off and len typed as uint32 in rndis_query function are controlled by incoming RNDIS response message thus their value may be manipulated. Setting off to a unexpectetly large value will cause the sum with len and 8 to overflow and pass the implemented validation step. Consequently the response pointer will be referring to a location past the expected buffer boundaries allowing information leakage e.g. via RNDIS_OID_802_3_PERMANENT_ADDRESS OID. Fixes: ddda086240 ("USB: rndis_host, various cleanups") Signed-off-by: Szymon Heidrich <szymon.heidrich@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2023-01-03 09:24:41 +00:00
..
appletalk
arcnet
bonding	drivers/net/bonding/bond_3ad: return when there's no aggregator	2023-01-03 09:17:12 +00:00
caif
can	can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len	2022-12-19 16:08:27 +01:00
dsa	net: dsa: qca8k: improve mdio master read/write by using single lo/hi	2023-01-01 09:27:12 +00:00
ethernet	net: dpaa: Fix dtsec check for PCS availability	2023-01-03 09:23:17 +00:00
fddi	net: defxx: Fix missing err handling in dfx_init()	2022-12-09 10:44:27 +00:00
fjes
hamradio	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-12-13 09:49:29 +01:00
hippi
hyperv
ieee802154	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-12-08 18:19:59 -08:00
ipa	net: ipa: use proper endpoint mask for suspend	2023-01-01 12:01:14 +00:00
ipvlan	Driver Core changes for 6.2-rc1	2022-12-16 03:54:54 -08:00
mctp	mctp: serial: Fix starting value for frame check sequence	2022-12-19 12:38:45 +00:00
mdio
netdevsim
pcs
phy	net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe	2022-12-30 07:46:10 +00:00
plip
ppp	Networking changes for 6.2.	2022-12-13 15:47:48 -08:00
pse-pd
slip
team	Networking changes for 6.2.	2022-12-13 15:47:48 -08:00
usb	usb: rndis_host: Secure rndis_query check against int overflow	2023-01-03 09:24:41 +00:00
vmxnet3	vmxnet3: correctly report csum_level for encapsulated packet	2022-12-21 17:55:30 -08:00
vxlan	vxlan: Fix memory leaks in error path	2023-01-02 13:37:33 +00:00
wan	net: farsync: Fix kmemleak when rmmods farsync	2022-12-12 09:42:45 +00:00
wireguard	wireguard: timers: cast enum limits members to int in prints	2022-12-13 19:30:45 -08:00
wireless	wifi: ath9k: use proper statements in conditionals	2022-12-20 15:02:37 +02:00
wwan	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-12-08 18:19:59 -08:00
xen-netback
amt.c
bareudp.c
dummy.c
eql.c
geneve.c
gtp.c
ifb.c
Kconfig
LICENSE.SRC
loopback.c
macsec.c	net: macsec: fix net device access prior to holding a lock	2022-12-13 18:58:08 -08:00
macvlan.c
macvtap.c
Makefile
mdio.c
mhi_net.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c	ntb_netdev: Use dev_kfree_skb_any() in interrupt context	2022-12-12 12:56:37 -08:00
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c	driver/net/tun: Added features for USO.	2022-12-12 09:29:56 +00:00
thunderbolt.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-12-08 18:19:59 -08:00
tun.c	driver/net/tun: Added features for USO.	2022-12-12 09:29:56 +00:00
veth.c	veth: Fix race with AF_XDP exposing old or uninitialized descriptors	2022-12-22 15:06:10 +01:00
virtio_net.c	drivers/net/virtio_net.c: Added USO support.	2022-12-12 09:29:56 +00:00
vrf.c	net: vrf: determine the dst using the original ifindex for multicast	2022-12-21 17:47:37 -08:00
vsockmon.c
xen-netfront.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-12-08 18:19:59 -08:00