Commit f316c244 authored by Szymon Heidrich's avatar Szymon Heidrich Committed by openeuler-sync-bot
Browse files

net: usb: smsc95xx: Limit packet length to skb->len

stable inclusion
from stable-v5.10.177
commit 33d1603a38e05886c538129ddfe00bd52d347e7b
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I88YNP

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=33d1603a38e05886c538129ddfe00bd52d347e7b



--------------------------------

[ Upstream commit ff821092 ]

Packet length retrieved from descriptor may be larger than
the actual socket buffer length. In such case the cloned
skb passed up the network stack will leak kernel memory contents.

Fixes: 2f7ca802 ("net: Add SMSC LAN9500 USB2.0 10/100 ethernet adapter driver")
Signed-off-by: default avatarSzymon Heidrich <szymon.heidrich@gmail.com>
Reviewed-by: default avatarJakub Kicinski <kuba@kernel.org>
Link: https://lore.kernel.org/r/20230316101954.75836-1-szymon.heidrich@gmail.com


Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarsanglipeng <sanglipeng1@jd.com>
(cherry picked from commit cac2e672)
parent 5c75549b
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment