Oliver Neukum 602ff39cf2 ax88172a: fix information leak on short answers ...

[ Upstream commit a9a51bd727d141a67b589f375fe69d0e54c4fe22 ]

If a malicious device gives a short MAC it can elicit up to
5 bytes of leaked memory out of the driver. We need to check for
ETH_ALEN instead.

Reported-by: syzbot+a8d4acdad35e6bbca308@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-11-25 15:53:41 +01:00

..

appletalk

net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT

2018-09-29 03:08:52 -07:00

arcnet

arcnet: provide a buffer big enough to actually receive packets

2019-10-05 12:27:41 +02:00

bonding

bonding: fix unexpected IFF_BONDING bit unset

2019-11-12 19:13:26 +01:00

caif

caif-hsi: fix possible deadlock in cfhsi_exit_module()

2019-08-04 09:34:54 +02:00

can

can: flexcan: disable completely the ECC mechanism

2019-11-12 19:13:30 +01:00

cris

…

dsa

net: dsa: mv88e6xxx: Fix u64 statistics

2019-03-23 08:44:23 +01:00

ethernet

e1000: fix memory leaks

2019-11-12 19:13:30 +01:00

fddi

…

fjes

fjes: Fix wrong netdevice feature flags

2017-12-20 10:04:55 +01:00

hamradio

net: hamradio: use eth_broadcast_addr

2018-08-24 13:26:55 +02:00

hippi

hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close

2018-02-25 11:03:42 +01:00

hyperv

hv_netvsc: use skb_get_hash() instead of a homegrown implementation

2017-03-26 12:13:18 +02:00

ieee802154

ieee802154: atusb: fix use-after-free at disconnect

2019-10-17 13:40:54 -07:00

ipvlan

ipvlan: disallow userns cap_net_admin to change global mode/flags

2019-03-23 08:44:31 +01:00

irda

irda: fix overly long udelay()

2018-06-06 16:46:21 +02:00

phy

net/phy: fix DP83865 10 Mbps HDX loopback disable function

2019-10-05 12:27:41 +02:00

plip

…

ppp

compat_ioctl: pppoe: fix PPPOEIOCSFWD handling

2019-08-11 12:20:46 +02:00

slip

slip: Fix memory leak in slip_open error path

2019-11-25 15:53:41 +01:00

team

team: Always enable vlan tx offload

2019-07-10 09:56:37 +02:00

usb

ax88172a: fix information leak on short answers

2019-11-25 15:53:41 +01:00

vmxnet3

vmxnet3: ensure that adapter is in proper state during force_close

2018-04-13 19:50:04 +02:00

wan

drivers: net: lmc: fix case value for target abort error

2018-09-05 09:18:36 +02:00

wimax

wimax/i2400m: fix a memory leak bug

2019-09-10 10:29:47 +01:00

wireless

rtlwifi: Fix potential overflow on P2P code

2019-11-06 12:09:22 +01:00

xen-netback

xen/netback: fix error path of xenvif_connect_data()

2019-10-29 09:13:32 +01:00

dummy.c

…

eql.c

…

geneve.c

geneve: avoid use-after-free of skb->data

2016-12-10 19:07:24 +01:00

ifb.c

…

Kconfig

vmxnet3: prevent building with 64K pages

2018-02-25 11:03:42 +01:00

LICENSE.SRC

…

loopback.c

net: introduce device min_header_len

2017-02-18 16:39:27 +01:00

macvlan.c

macvlan: Only deliver one copy of the frame to the macvlan interface

2017-12-20 10:05:01 +01:00

macvtap.c

tun/tap: sanitize TUNSETSNDBUF input

2017-11-18 11:11:05 +01:00

Makefile

…

mdio.c

…

mii.c

…

netconsole.c

…

nlmon.c

…

ntb_netdev.c

…

rionet.c

rapidio/rionet: do not free skb before reading its length

2018-12-13 09:21:26 +01:00

sb1000.c

…

Space.c

…

sungem_phy.c

…

tun.c

tun: fix use-after-free when register netdev failed

2019-09-21 07:12:41 +02:00

veth.c

veth: set peer GSO values

2018-03-22 09:23:29 +01:00

virtio_net.c

virtio-net: Fix operstate for virtio when no VIRTIO_NET_F_STATUS

2018-05-30 07:49:11 +02:00

vrf.c

vrf: Fix use after free and double free in vrf_finish_output

2018-04-13 19:50:27 +02:00

vxlan.c

vxlan: check tun_info options_len properly

2019-11-10 11:21:12 +01:00

xen-netfront.c

xen-netfront: do not use ~0U as error return value for xennet_fill_frags()

2019-10-07 21:01:06 +02:00