Johannes Berg c64ee9dd33 wifi: mac80211_hwsim: drop short frames ...

[ Upstream commit fba360a047 ]

While technically some control frames like ACK are shorter and
end after Address 1, such frames shouldn't be forwarded through
wmediumd or similar userspace, so require the full 3-address
header to avoid accessing invalid memory if shorter frames are
passed in.

Reported-by: syzbot+b2645b5bf1512b81fa22@syzkaller.appspotmail.com
Reviewed-by: Jeff Johnson <quic_jjohnson@quicinc.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-09-23 11:09:56 +02:00

..

appletalk

…

arcnet

net: arcnet: Do not call kfree_skb() under local_irq_disable()

2023-09-19 12:22:34 +02:00

bonding

bonding: fix macvlan over alb bond support

2023-08-30 16:18:15 +02:00

caif

…

can

can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM

2023-09-19 12:22:32 +02:00

dsa

net: dsa: sja1105: hide all multicast addresses from "bridge fdb show"

2023-09-19 12:23:03 +02:00

ethernet

alx: fix OOB-read compiler warning

2023-09-23 11:09:56 +02:00

fddi

…

fjes

…

hamradio

…

hippi

…

hyperv

…

ieee802154

…

ipa

…

ipvlan

ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()

2023-08-30 16:18:14 +02:00

mctp

…

mdio

…

netdevsim

…

pcs

…

phy

net: phy: broadcom: stub c45 read/write for 54810

2023-08-26 14:23:34 +02:00

plip

…

ppp

…

slip

…

team

team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves

2023-08-26 14:23:34 +02:00

usb

r8152: check budget for r8152_poll()

2023-09-19 12:23:03 +02:00

vmxnet3

…

vxlan

vxlan: generalize vxlan_parse_gpe_hdr and remove unused args

2023-09-19 12:22:27 +02:00

wan

…

wireguard

wireguard: allowedips: expand maximum node depth

2023-08-16 18:21:57 +02:00

wireless

wifi: mac80211_hwsim: drop short frames

2023-09-23 11:09:56 +02:00

wwan

…

xen-netback

xen/netback: Fix buffer overrun triggered by unusual packet

2023-08-08 19:58:35 +02:00

bareudp.c

…

dummy.c

…

eql.c

…

geneve.c

…

gtp.c

…

ifb.c

…

Kconfig

…

LICENSE.SRC

…

loopback.c

…

macsec.c

Revert "net: macsec: preserve ingress frame ordering"

2023-09-19 12:22:30 +02:00

macvlan.c

…

macvtap.c

…

Makefile

vxlan: move to its own directory

2023-08-03 10:22:34 +02:00

mdio.c

…

mhi_net.c

…

mii.c

…

net_failover.c

…

netconsole.c

…

nlmon.c

…

ntb_netdev.c

…

rionet.c

…

sb1000.c

…

Space.c

…

sungem_phy.c

…

tap.c

net: tap_open(): set sk_uid from current_fsuid()

2023-08-11 15:13:57 +02:00

thunderbolt.c

…

tun.c

drivers: net: prevent tun_build_skb() to exceed the packet size limit

2023-08-16 18:22:01 +02:00

veth.c

veth: Fixing transmit return status for dropped packets

2023-09-19 12:22:58 +02:00

virtio_net.c

virtio-net: set queues after driver_ok

2023-08-26 14:23:38 +02:00

vrf.c

…

vsockmon.c

…

xen-netfront.c

…