Re: [PATCH net v1] net: wwan: fix global oob in wwan_rtnl_policy
From: patchwork-bot+netdevbpf
Date: Mon Oct 21 2024 - 05:50:46 EST
Hello:
This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@xxxxxxxxxx>:
On Tue, 15 Oct 2024 21:16:21 +0800 you wrote:
> The variable wwan_rtnl_link_ops assign a *bigger* maxtype which leads to
> a global out-of-bounds read when parsing the netlink attributes. Exactly
> same bug cause as the oob fixed in commit b33fb5b801c6 ("net: qualcomm:
> rmnet: fix global oob in rmnet_policy").
>
> ==================================================================
> BUG: KASAN: global-out-of-bounds in validate_nla lib/nlattr.c:388 [inline]
> BUG: KASAN: global-out-of-bounds in __nla_validate_parse+0x19d7/0x29a0 lib/nlattr.c:603
> Read of size 1 at addr ffffffff8b09cb60 by task syz.1.66276/323862
>
> [...]
Here is the summary with links:
- [net,v1] net: wwan: fix global oob in wwan_rtnl_policy
https://git.kernel.org/netdev/net/c/47dd5447cab8
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html