linux/drivers/net/can/usb/peak_usb
Pengpeng Hou 93fcab2c69 can: peak_usb: validate uCAN receive record lengths
pcan_usb_fd_decode_buf() walks uCAN records packed in one USB
receive buffer.

Require each record to contain the fixed header for its type, and verify
CAN payload bytes before copying them into the skb.

Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://patch.msgid.link/20260706092836.79754-1-pengpeng@iscas.ac.cn
Fixes: 0a25e1f4f1 ("can: peak_usb: add support for PEAK new CANFD USB adapters")
Cc: stable@vger.kernel.org
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
2026-07-29 11:59:01 +02:00
..
Makefile treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00
pcan_usb_core.c can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error 2026-07-29 11:58:25 +02:00
pcan_usb_core.h can: peak: Modification of references to email accounts being deleted 2026-07-16 09:12:24 +02:00
pcan_usb_fd.c can: peak_usb: validate uCAN receive record lengths 2026-07-29 11:59:01 +02:00
pcan_usb_pro.c can: peak_usb: add bounds check for USB channel index 2026-07-29 11:58:25 +02:00
pcan_usb_pro.h can: peak: Modification of references to email accounts being deleted 2026-07-16 09:12:24 +02:00
pcan_usb.c can: peak: Modification of references to email accounts being deleted 2026-07-16 09:12:24 +02:00