linux-stable/drivers/net
Sasha Neftin 4250fca57d e1000e: Fix possible overflow in LTR decoding
commit 04ebaa1cfd upstream.

When we decode the latency and the max_latency, u16 value may not fit
the required size and could lead to the wrong LTR representation.

Scaling is represented as:
scale 0 - 1         (2^(5*0)) = 2^0
scale 1 - 32        (2^(5 *1))= 2^5
scale 2 - 1024      (2^(5 *2)) =2^10
scale 3 - 32768     (2^(5 *3)) =2^15
scale 4 - 1048576   (2^(5 *4)) = 2^20
scale 5 - 33554432  (2^(5 *4)) = 2^25
scale 4 and scale 5 required 20 and 25 bits respectively.
scale 6 reserved.

Replace the u16 type with the u32 type and allow corrected LTR
representation.

Cc: stable@vger.kernel.org
Fixes: 44a13a5d99 ("e1000e: Fix the max snoop/no-snoop latency for 10M")
Reported-by: James Hutchinson <jahutchinson99@googlemail.com>
Link: https://bugzilla.kernel.org/show_bug.cgi?id=215689
Suggested-by: Dima Ruinskiy <dima.ruinskiy@intel.com>
Signed-off-by: Sasha Neftin <sasha.neftin@intel.com>
Tested-by: Naama Meir <naamax.meir@linux.intel.com>
Tested-by: James Hutchinson <jahutchinson99@googlemail.com>
Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-04-27 14:41:14 +02:00
..
appletalk
arcnet net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() 2022-03-03 10:29:13 +00:00
bonding bonding: force carrier update when releasing slave 2022-02-17 10:55:21 -08:00
caif virtio: wrap config->reset calls 2022-01-14 18:50:52 -05:00
can can: etas_es58x: es58x_fd_rx_event_msg(): initialize rx_event_msg before calling es58x_check_msg_len() 2022-04-13 19:27:20 +02:00
dsa net: dsa: felix: fix tagging protocol changes with multiple CPU ports 2022-04-20 09:36:18 +02:00
ethernet e1000e: Fix possible overflow in LTR decoding 2022-04-27 14:41:14 +02:00
fddi
fjes
hamradio drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() 2022-02-18 10:58:17 +00:00
hippi
hyperv Netvsc: Call hv_unmap_memory() in the netvsc_device_remove() 2022-04-08 13:58:05 +02:00
ieee802154 net: ieee802154: ca8210: Fix lifs/sifs periods 2022-02-02 18:04:50 +01:00
ipa net: ipa: add an interconnect dependency 2022-03-02 22:14:05 -08:00
ipvlan
mctp mctp: serial: Cancel pending work from ndo_uninit handler 2022-02-11 14:39:54 -08:00
mdio net: mdio: don't defer probe forever if PHY IRQ provider is missing 2022-04-20 09:36:13 +02:00
netdevsim ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt 2022-02-17 09:48:24 -08:00
pcs
phy net: sfp: add 2500base-X quirk for Lantech SFP module 2022-04-13 19:27:21 +02:00
plip
ppp TTY/Serial driver updates for 5.17-rc1 2022-01-12 11:21:52 -08:00
slip drivers: net: slip: fix NPD bug in sl_tx_timeout() 2022-04-20 09:36:23 +02:00
team
usb net: usb: aqc111: Fix out-of-bounds accesses in RX fixup 2022-04-20 09:36:22 +02:00
vmxnet3 vmxnet3: Remove useless DMA-32 fallback configuration 2022-01-09 16:52:19 -08:00
wan
wireguard wireguard: socket: ignore v6 endpoints when ipv6 is disabled 2022-04-08 13:58:54 +02:00
wireless brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant 2022-04-27 14:41:09 +02:00
wwan net: wwan: qcom_bam_dmux: fix wrong pointer passed to IS_ERR() 2022-04-08 13:58:22 +02:00
xen-netback Revert "xen-netback: Check for hotplug-status existence before watching" 2022-02-24 08:58:37 -08:00
Kconfig
LICENSE.SRC
Makefile
Space.c
amt.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2022-01-09 17:00:17 -08:00
bareudp.c bareudp: use ipv6_mod_enabled to check if IPv6 enabled 2022-04-08 13:58:20 +02:00
dummy.c
eql.c
geneve.c
gtp.c
ifb.c
loopback.c
macsec.c net: macsec: Verify that send_sci is on when setting Tx sci explicitly 2022-02-01 20:32:20 -08:00
macvlan.c macvlan: Fix leaking skb in source mode with nodst option 2022-04-20 09:36:17 +02:00
macvtap.c macvtap: advertise link netns via netlink 2022-04-13 19:27:19 +02:00
mdio.c
mhi_net.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
sungem_phy.c
tap.c tuntap: add sanity checks about msg_controllen in sendmsg 2022-04-13 19:27:19 +02:00
thunderbolt.c
tun.c tun: annotate access to queue->trans_start 2022-04-20 09:36:18 +02:00
veth.c veth: Ensure eth header is in skb's linear part 2022-04-20 09:36:12 +02:00
virtio_net.c bitmap patches for 5.17-rc1 2022-01-23 06:20:44 +02:00
vrf.c vrf: fix packet sniffing for traffic originating from ip tunnels 2022-04-13 19:27:28 +02:00
vsockmon.c
vxlan.c vxlan: fix error return code in vxlan_fdb_append 2022-04-27 14:41:08 +02:00
xen-netfront.c xen/netfront: react properly to failing gnttab_end_foreign_access_ref() 2022-03-07 09:48:55 +01:00