Lubancat2/kernel
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
2ada40308a0db8332ede32e274c54a08efe7ff52
kernel/net
History
Will Deacon 24ca628920 mac80211: Reject malformed SSID elements 
commit 4152561f5da3fca92af7179dd538ea89e248f9d0 upstream.

Although this shouldn't occur in practice, it's a good idea to bounds
check the length field of the SSID element prior to using it for things
like allocations or memcpy operations.

Cc: <stable@vger.kernel.org>
Cc: Kees Cook <keescook@chromium.org>
Reported-by: Nicolas Waisman <nico@semmle.com>
Signed-off-by: Will Deacon <will@kernel.org>
Link: https://lore.kernel.org/r/20191004095132.15777-1-will@kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-10-29 09:19:53 +01:00
..
6lowpan
…
9p
9p: Transport error uninitialized
2019-10-11 18:21:12 +02:00
802
…
8021q
…
appletalk
appletalk: enforce CAP_NET_RAW for raw sockets
2019-10-05 13:09:31 +02:00
atm
…
ax25
ax25: enforce CAP_NET_RAW for raw sockets
2019-10-05 13:09:32 +02:00
batman-adv
batman-adv: Only read OGM2 tvlv_len after buffer len check
2019-09-21 07:16:59 +02:00
bluetooth
Revert "Bluetooth: validate BLE connection interval updates"
2019-10-01 08:25:59 +02:00
bpf
…
bpfilter
…
bridge
netfilter: ebtables: Fix argument order to ADD_COUNTER
2019-09-21 07:16:54 +02:00
caif
…
can
…
ceph
…
core
net: Unpublish sk from sk_reuseport_cb before call_rcu
2019-10-07 18:57:22 +02:00
dcb
…
dccp
…
decnet
…
dns_resolver
…
dsa
…
ethernet
…
hsr
…
ieee802154
ieee802154: enforce CAP_NET_RAW for raw sockets
2019-10-05 13:09:32 +02:00
ife
…
ipv4
ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
2019-10-29 09:19:39 +01:00
ipv6
net: ipv6: fix listify ip6_rcv_finish in case of forwarding
2019-10-29 09:19:42 +01:00
iucv
…
kcm
…
key
…
l2tp
…
l3mdev
…
lapb
…
llc
…
mac80211
mac80211: Reject malformed SSID elements
2019-10-29 09:19:53 +01:00
mac802154
…
mpls
…
ncsi
…
netfilter
netfilter: nft_connlimit: disable bh on garbage collection
2019-10-29 09:19:34 +01:00
netlabel
…
netlink
…
netrom
…
nfc
NFC: fix attrs checks in netlink interface
2019-10-07 18:57:28 +02:00
nsh
…
openvswitch
openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
2019-10-05 13:09:29 +02:00
packet
…
phonet
…
psample
…
qrtr
net: qrtr: Stop rx_worker before freeing node
2019-10-05 13:09:27 +02:00
rds
net/rds: Fix error handling in rds_ib_add_one()
2019-10-07 18:57:24 +02:00
rfkill
…
rose
…
rxrpc
…
sched
net: avoid potential infinite loop in tc_ctl_action()
2019-10-29 09:19:39 +01:00
sctp
sctp: change sctp_prot .no_autobind with true
2019-10-29 09:19:42 +01:00
smc
…
strparser
…
sunrpc
…
switchdev
…
tipc
tipc: fix unlimited bundling of small messages
2019-10-07 18:57:25 +02:00
tls
…
unix
…
vmw_vsock
vsock: Fix a lockdep warning in __vsock_release()
2019-10-07 18:57:23 +02:00
wimax
…
wireless
cfg80211: wext: avoid copying malformed SSIDs
2019-10-29 09:19:52 +01:00
x25
…
xdp
xdp: unpin xdp umem pages in error path
2019-09-21 07:16:57 +02:00
xfrm
…
compat.c
…
Kconfig
…
Makefile
…
socket.c
…
sysctl_net.c
…