linux-stable/drivers/net
Dan Carpenter eda518db7d ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
[ Upstream commit 2dc509305c ]

The "rxstatus->rs_keyix" eventually gets passed to test_bit() so we need to
ensure that it is within the bitmap.

drivers/net/wireless/ath/ath9k/common.c:46 ath9k_cmn_rx_accept()
error: passing untrusted data 'rx_stats->rs_keyix' to 'test_bit()'

Fixes: 4ed1a8d4a2 ("ath9k_htc: use ath9k_cmn_rx_accept")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Toke Høiland-Jørgensen <toke@toke.dk>
Signed-off-by: Kalle Valo <quic_kvalo@quicinc.com>
Link: https://lore.kernel.org/r/20220409061225.GA5447@kili
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-06-09 10:25:42 +02:00
..
appletalk
arcnet
bonding bonding: do not discard lowest hash bit for non layer3+4 hashing 2022-05-09 09:16:28 +02:00
caif
can can: mcp251xfd: silence clang's -Wunaligned-access warning 2022-06-09 10:25:30 +02:00
dsa net: dsa: mt7530: 1G can also support 1000BASE-X link mode 2022-06-09 10:25:39 +02:00
ethernet ixp4xx_eth: fix error check return value of platform_get_irq() 2022-06-09 10:25:39 +02:00
fddi
fjes
hamradio
hippi drivers: net: hippi: Fix deadlock in rr_close() 2022-05-09 09:16:28 +02:00
hyperv
ieee802154
ipa net: ipa: ignore endianness if there is no header 2022-06-09 10:25:30 +02:00
ipvlan
mctp
mdio net: mdio: Fix ENOMEM return value in BCM6368 mux bus controller 2022-05-12 12:32:35 +02:00
netdevsim
pcs
phy net: phy: micrel: Allow probing without .driver_data 2022-06-09 10:25:29 +02:00
plip
ppp net: fix dev_fill_forward_path with pppoe + bridge 2022-05-25 09:59:07 +02:00
slip
team
usb usbnet: Run unregister_netdev() before unbind() again 2022-06-09 10:25:27 +02:00
vmxnet3 net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() 2022-05-25 09:59:08 +02:00
wan
wireguard
wireless ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix 2022-06-09 10:25:42 +02:00
wwan
xen-netback
amt.c
bareudp.c
dummy.c
eql.c
geneve.c
gtp.c
ifb.c
Kconfig
LICENSE.SRC
loopback.c
macsec.c
macvlan.c
macvtap.c
Makefile
mdio.c
mhi_net.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c
thunderbolt.c
tun.c
veth.c
virtio_net.c
vrf.c
vsockmon.c
vxlan.c
xen-netfront.c