Commit 86f910f4 authored by Szymon Heidrich's avatar Szymon Heidrich Committed by sanglipeng
Browse files

net: usb: smsc75xx: Limit packet length to skb->len

stable inclusion
from stable-v5.10.176
commit e294f0aa47e4844f3d3c8766c02accd5a76a7d4e
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I8CHVQ

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e294f0aa47e4844f3d3c8766c02accd5a76a7d4e



--------------------------------

[ Upstream commit d8b22831 ]

Packet length retrieved from skb data may be larger than
the actual socket buffer length (up to 9026 bytes). In such
case the cloned skb passed up the network stack will leak
kernel memory contents.

Fixes: d0cad871 ("smsc75xx: SMSC LAN75xx USB gigabit ethernet adapter driver")
Signed-off-by: default avatarSzymon Heidrich <szymon.heidrich@gmail.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarsanglipeng <sanglipeng1@jd.com>
parent 01541c40
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment