linux-stable/drivers/net
Johannes Berg c64ee9dd33 wifi: mac80211_hwsim: drop short frames
[ Upstream commit fba360a047 ]

While technically some control frames like ACK are shorter and
end after Address 1, such frames shouldn't be forwarded through
wmediumd or similar userspace, so require the full 3-address
header to avoid accessing invalid memory if shorter frames are
passed in.

Reported-by: syzbot+b2645b5bf1512b81fa22@syzkaller.appspotmail.com
Reviewed-by: Jeff Johnson <quic_jjohnson@quicinc.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-09-23 11:09:56 +02:00
..
appletalk
arcnet net: arcnet: Do not call kfree_skb() under local_irq_disable() 2023-09-19 12:22:34 +02:00
bonding bonding: fix macvlan over alb bond support 2023-08-30 16:18:15 +02:00
caif
can can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM 2023-09-19 12:22:32 +02:00
dsa net: dsa: sja1105: hide all multicast addresses from "bridge fdb show" 2023-09-19 12:23:03 +02:00
ethernet alx: fix OOB-read compiler warning 2023-09-23 11:09:56 +02:00
fddi
fjes
hamradio
hippi
hyperv hv_netvsc: Check status in SEND_RNDIS_PKT completion message 2023-03-10 09:39:51 +01:00
ieee802154 ieee802154: hwsim: Fix possible memory leaks 2023-06-28 10:29:45 +02:00
ipa net: ipa: compute DMA pool size properly 2023-04-05 11:24:57 +02:00
ipvlan ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() 2023-08-30 16:18:14 +02:00
mctp
mdio net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() 2023-05-24 17:36:41 +01:00
netdevsim netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() 2023-07-23 13:47:45 +02:00
pcs net: pcs: xpcs: remove double-read of link state when using AN 2023-05-11 23:00:26 +09:00
phy net: phy: broadcom: stub c45 read/write for 54810 2023-08-26 14:23:34 +02:00
plip
ppp pptp: Fix fib lookup calls. 2023-07-23 13:47:30 +02:00
slip
team team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves 2023-08-26 14:23:34 +02:00
usb r8152: check budget for r8152_poll() 2023-09-19 12:23:03 +02:00
vmxnet3
vxlan vxlan: generalize vxlan_parse_gpe_hdr and remove unused args 2023-09-19 12:22:27 +02:00
wan net: lapbether: only support ethernet devices 2023-06-21 15:59:18 +02:00
wireguard wireguard: allowedips: expand maximum node depth 2023-08-16 18:21:57 +02:00
wireless wifi: mac80211_hwsim: drop short frames 2023-09-23 11:09:56 +02:00
wwan
xen-netback xen/netback: Fix buffer overrun triggered by unusual packet 2023-08-08 19:58:35 +02:00
bareudp.c
dummy.c
eql.c
geneve.c
gtp.c gtp: Fix use-after-free in __gtp_encap_destroy(). 2023-07-23 13:46:55 +02:00
ifb.c
Kconfig
LICENSE.SRC
loopback.c
macsec.c Revert "net: macsec: preserve ingress frame ordering" 2023-09-19 12:22:30 +02:00
macvlan.c
macvtap.c
Makefile vxlan: move to its own directory 2023-08-03 10:22:34 +02:00
mdio.c
mhi_net.c
mii.c
net_failover.c net/net_failover: fix txq exceeding warning 2023-04-05 11:24:55 +02:00
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c net: tap_open(): set sk_uid from current_fsuid() 2023-08-11 15:13:57 +02:00
thunderbolt.c
tun.c drivers: net: prevent tun_build_skb() to exceed the packet size limit 2023-08-16 18:22:01 +02:00
veth.c veth: Fixing transmit return status for dropped packets 2023-09-19 12:22:58 +02:00
virtio_net.c virtio-net: set queues after driver_ok 2023-08-26 14:23:38 +02:00
vrf.c
vsockmon.c
xen-netfront.c