Re: [PATCH net-next] rndis_host: add overflow check in rndis_rx_fixup()

[Simon Horman]

On Thu, Jul 09, 2026 at 02:24:01PM +0200, Greg Kroah-Hartman wrote:
> From: Griffin Kroah-Hartman <griffin@xxxxxxxxx>
> 
> Add an overflow check to ensure that data_offset + data_len + 8 does not
> wrap, which would enable an OOB read of the USB data buffer.
> 
> Assisted-by: gkh_clanker_1000
> Cc: Andrew Lunn <andrew+netdev@xxxxxxx>
> Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
> Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
> Cc: Jakub Kicinski <kuba@xxxxxxxxxx>
> Cc: Paolo Abeni <pabeni@xxxxxxxxxx>
> Cc: Shaoxu Liu <shaoxul@xxxxxxxxxxx>
> Signed-off-by: Griffin Kroah-Hartman <griffin@xxxxxxxxx>
> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

Reviewed-by: Simon Horman <horms@xxxxxxxxxx>