Re: [PATCH net] net: usb: sierra_net: reject short firmware attribute reads

From: patchwork-bot+netdevbpf

Date: Wed Oct 07 2026 - 22:35:32 EST


Hello:

This patch was applied to netdev/net-next.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Mon, 5 Oct 2026 11:59:20 -0400 you wrote:
> sierra_net_get_fw_attr() only checks usbnet_read_cmd() for negative
> return values before converting attrdata and storing it in *datap.
> A zero-length or one-byte response leaves attrdata wholly or partially
> uninitialized.
>
> Although sierra_net_bind() rejects responses of unexpected length, its
> dev_dbg() call uses fwattr before that check. When the debug message is
> enabled, the incomplete value may therefore be used in the debug output.
>
> [...]

Here is the summary with links:
- [net] net: usb: sierra_net: reject short firmware attribute reads
https://git.kernel.org/netdev/net-next/c/8df0638138d3

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html