Re: [PATCH net v2 0/2] net: usb: pegasus: fix receive length handling
From: patchwork-bot+netdevbpf
Date: Mon Oct 26 2026 - 19:21:20 EST
Hello:
This series was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Wed, 21 Oct 2026 10:03:08 +0800 you wrote:
> Two fixes for read_bulk_callback(), both reachable by a USB device that
> identifies itself as a Pegasus II adapter.
>
> Patch 1 fixes an out-of-bounds write: on the 0x8513, every frame that
> is dropped because of an oversized length field advances the receive
> buffer by two bytes, until the host controller writes past the end of
> the skb data area.
>
> [...]
Here is the summary with links:
- [net,v2,1/2] net: usb: pegasus: do not advance rx_skb->data on dropped frames
https://git.kernel.org/netdev/net/c/bfa09dccf98c
- [net,v2,2/2] net: usb: pegasus: check rx pkt_len against the received length
https://git.kernel.org/netdev/net/c/efee699f6de0
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html