Re: [PATCH] hwmon: corsair-psu: fix possible out-of-bounds access on missing string termination
From: Guenter Roeck
Date: Wed Aug 05 2026 - 10:56:44 EST
On Wed, Aug 05, 2026 at 07:19:20AM +0000, Wilken Gottwalt wrote:
> In theory it could be possible that the REPLY_SIZE sized buffers for
> holding the vendor and product strings could be end up missing the null
> termination (for example by malicious hardware built on purpose)
> required by the seq_printf() call. That limits the debugfs printf calls
> to a maximum string length of REPLY_SIZE.
>
> Fixes: d115b51e0e567 ("hwmon: add Corsair PSU HID controller driver")
> Signed-off-by: Wilken Gottwalt <wilken.gottwalt@xxxxxxxxxx>
Applied.
Thanks,
Guenter