net: usb: smsc75xx: Limit packet length to skb->len
stable inclusion from stable-v5.10.176 commit e294f0aa47e4844f3d3c8766c02accd5a76a7d4e category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I8CHVQ Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e294f0aa47e4844f3d3c8766c02accd5a76a7d4e -------------------------------- [ Upstream commit d8b22831 ] Packet length retrieved from skb data may be larger than the actual socket buffer length (up to 9026 bytes). In such case the cloned skb passed up the network stack will leak kernel memory contents. Fixes: d0cad871 ("smsc75xx: SMSC LAN75xx USB gigabit ethernet adapter driver") Signed-off-by:Szymon Heidrich <szymon.heidrich@gmail.com> Signed-off-by:
David S. Miller <davem@davemloft.net> Signed-off-by:
Sasha Levin <sashal@kernel.org> Signed-off-by:
sanglipeng <sanglipeng1@jd.com>
Loading
Please sign in to comment