Commit a677be71 authored by Tony Nguyen's avatar Tony Nguyen Committed by Wang Liang
Browse files

igb: Initialize mailbox message for VF reset 

stable inclusion
from stable-v4.19.270
commit ef1d739dd1f362aec081278ff92f943c31eb177a
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAYRIW
CVE: CVE-2022-48949

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ef1d739dd1f362aec081278ff92f943c31eb177a



--------------------------------

commit de5dc443 upstream.

When a MAC address is not assigned to the VF, that portion of the message
sent to the VF is not set. The memory, however, is allocated from the
stack meaning that information may be leaked to the VM. Initialize the
message buffer to 0 so that no information is passed to the VM in this
case.

Fixes: 6ddbc4cf ("igb: Indicate failure on vf reset for empty mac address")
Reported-by: default avatarAkihiko Odaki <akihiko.odaki@daynix.com>
Signed-off-by: default avatarTony Nguyen <anthony.l.nguyen@intel.com>
Reviewed-by: default avatarAkihiko Odaki <akihiko.odaki@daynix.com>
Reviewed-by: default avatarLeon Romanovsky <leonro@nvidia.com>
Link: https://lore.kernel.org/r/20221212190031.3983342-1-anthony.l.nguyen@intel.com


Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: default avatarWang Liang <wangliang74@huawei.com>
parent fc269dcb

drivers/net/ethernet/intel/igb/igb_main.c

+1 −1
Original line number Diff line number Diff line
@@ -7151,7 +7151,7 @@ static void igb_vf_reset_msg(struct igb_adapter *adapter, u32 vf) 
{

	struct e1000_hw *hw = &adapter->hw;

	unsigned char *vf_mac = adapter->vf_data[vf].vf_mac_addresses;

	u32 reg, msgbuf[3];

	u32 reg, msgbuf[3] = {};

	u8 *addr = (u8 *)(&msgbuf[1]);



	/* process all the same items cleared in a function level reset */