Peter SeidererandGreg Kroah-Hartman 6b1d3e9db8 net: pktgen: fix access outside of user given buffer in pktgen_thread_write() ...

[ Upstream commit 425e64440a ]

Honour the user given buffer size for the strn_len() calls (otherwise
strn_len() will access memory outside of the user given buffer).

Signed-off-by: Peter Seiderer <ps.report@gmx.net>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/20250219084527.20488-8-ps.report@gmx.net
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-05-29 11:02:43 +02:00

..

6lowpan

…

9p

9p/trans_fd: mark concurrent read and writes to p9_conn->err

2025-05-02 07:59:20 +02:00

802

net: 802: LLC+SNAP OID:PID lookup on start of skb data

2025-01-17 13:40:37 +01:00

8021q

net: vlan: don't propagate flags on open

2025-04-20 10:15:21 +02:00

appletalk

…

atm

atm: Fix NULL pointer dereference

2025-04-07 10:08:35 +02:00

ax25

ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt

2025-02-21 14:01:16 +01:00

batman-adv

batman-adv: Ignore own maximum aggregation size during RX

2025-03-28 22:03:31 +01:00

bluetooth

Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken

2025-05-29 11:02:07 +02:00

bpf

bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()

2025-02-27 04:30:18 -08:00

bridge

net: bridge: switchdev: do not notify new brentries as changed

2025-04-25 10:47:45 +02:00

caif

…

can

can: gw: fix RCU/BH usage in cgw_create_job()

2025-05-18 08:24:48 +02:00

ceph

ceph: allocate sparse_ext map only for sparse reads

2025-01-02 10:34:09 +01:00

core

net: pktgen: fix access outside of user given buffer in pktgen_thread_write()

2025-05-29 11:02:43 +02:00

dcb

…

dccp

…

devlink

devlink: fix xa_alloc_cyclic() error handling

2025-03-28 22:03:27 +01:00

dns_resolver

…

dsa

net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails

2025-04-25 10:47:46 +02:00

ethernet

…

ethtool

ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()

2025-04-25 10:47:43 +02:00

handshake

…

hsr

net: hsr: Fix PRP duplicate detection

2025-05-29 11:02:20 +02:00

ieee802154

net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()

2024-12-14 20:03:47 +01:00

ife

…

ipv4

ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().

2025-05-29 11:02:32 +02:00

ipv6

net: ipv6: Init tunnel link-netns before registering dev

2025-05-29 11:02:40 +02:00

iucv

…

kcm

…

key

xfrm: Add support for per cpu xfrm state handling.

2025-02-08 09:58:00 +01:00

l2tp

…

l3mdev

…

lapb

…

llc

llc: do not use skb_get() before dev_queue_xmit()

2025-03-13 13:02:05 +01:00

mac80211

wifi: mac80211: fix warning on disconnect during failed ML reconf

2025-05-29 11:02:23 +02:00

mac802154

mac802154: check local interfaces before deleting sdata list

2025-01-23 17:22:54 +01:00

mctp

net: mctp: Ensure keys maintain only one ref to corresponding dev

2025-05-22 14:29:40 +02:00

mpls

…

mptcp

mptcp: only inc MPJoinAckHMacFailure for HMAC failures

2025-04-20 10:15:45 +02:00

ncsi

net/ncsi: wait for the last response to Deselect Package before configuring channel

2025-02-17 10:05:41 +01:00

netfilter

netfilter: conntrack: Bound nf_conntrack sysctl writes

2025-05-29 11:02:20 +02:00

netlabel

…

netlink

…

netrom

netrom: check buffer length before accessing it

2025-01-09 13:33:38 +01:00

nfc

NFC: nci: Add bounds checking in nci_hci_create_pipe()

2025-02-17 10:05:40 +01:00

nsh

…

openvswitch

openvswitch: Fix unsafe attribute parsing in output_userspace()

2025-05-18 08:24:47 +02:00

packet

af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK

2025-01-09 13:33:42 +01:00

phonet

…

psample

psample: adjust size if rate_as_probability is set

2024-12-27 14:02:06 +01:00

qrtr

…

rds

rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy

2025-01-17 13:40:47 +01:00

rfkill

…

rose

net: rose: lock the socket in rose_bind()

2025-02-17 10:05:01 +01:00

rxrpc

rxrpc: rxperf: Fix missing decoding of terminal magic cookie

2025-03-07 18:25:29 +01:00

sched

net_sched: Flush gso_skb list too during ->change()

2025-05-22 14:29:39 +02:00

sctp

sctp: detect and prevent references to a freed transport in sendmsg

2025-04-20 10:15:50 +02:00

smc

net/smc: use the correct ndev to find pnetid by pnetid table

2025-05-29 11:02:18 +02:00

strparser

strparser: Add read_sock callback

2025-02-27 04:30:19 -08:00

sunrpc

SUNRPC: rpcbind should never reset the port to the value '0'

2025-05-29 11:02:06 +02:00

switchdev

net: switchdev: Convert blocking notification chain to a raw one

2025-03-22 12:54:12 -07:00

tipc

tipc: fix NULL pointer dereference in tipc_mon_reinit_self()

2025-05-02 07:59:02 +02:00

tls

net/tls: fix kernel panic when alloc_page failed

2025-05-22 14:29:43 +02:00

unix

splice: do not checksum AF_UNIX sockets

2024-12-19 18:12:59 +01:00

vmw_vsock

vsock: avoid timeout during connect() if the socket is closing

2025-04-10 14:39:34 +02:00

wireless

wifi: cfg80211: allow IR in 20 MHz configurations

2025-05-29 11:02:23 +02:00

x25

…

xdp

xsk: Fix race condition in AF_XDP generic RX path

2025-05-09 09:50:38 +02:00

xfrm

xfrm_output: Force software GSO only in tunnel mode

2025-03-28 22:03:25 +01:00

compat.c

…

devres.c

…

Kconfig

…

Kconfig.debug

…

Makefile

…

socket.c

…

sysctl_net.c

…