Re: [PATCH net v2] net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@xxxxxxxxxx>:

On Mon, 29 Jun 2026 21:51:21 -0700 you wrote:
> For an even packet_len, net1080_rx_fixup() reads the pad byte at
> skb->data[packet_len] before the skb->len != packet_len check further
> down, and packet_len is only bounded against NC_MAX_PACKET. A malicious
> NetChip 1080 device can send a short frame advertising a large even
> packet_len (e.g. 0x4000), so the pad-byte read lands past the end of the
> skb:
> 
> [...]

Here is the summary with links:
  - [net,v2] net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
    https://git.kernel.org/netdev/net/c/03f384bc0cb8

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html