github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-08-07 07:54:18 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
f8fded7536
linux/drivers
History
Eric Dumazet de9c4861fb pptp: ensure minimal skb length in pptp_xmit() 
Commit aabc6596ff ("net: ppp: Add bound checking for skb data
on ppp_sync_txmung") fixed ppp_sync_txmunge()

We need a similar fix in pptp_xmit(), otherwise we might
read uninit data as reported by syzbot.

BUG: KMSAN: uninit-value in pptp_xmit+0xc34/0x2720 drivers/net/ppp/pptp.c:193
  pptp_xmit+0xc34/0x2720 drivers/net/ppp/pptp.c:193
  ppp_channel_bridge_input drivers/net/ppp/ppp_generic.c:2290 [inline]
  ppp_input+0x1d6/0xe60 drivers/net/ppp/ppp_generic.c:2314
  pppoe_rcv_core+0x1e8/0x760 drivers/net/ppp/pppoe.c:379
  sk_backlog_rcv+0x142/0x420 include/net/sock.h:1148
  __release_sock+0x1d3/0x330 net/core/sock.c:3213
  release_sock+0x6b/0x270 net/core/sock.c:3767
  pppoe_sendmsg+0x15d/0xcb0 drivers/net/ppp/pppoe.c:904
  sock_sendmsg_nosec net/socket.c:712 [inline]
  __sock_sendmsg+0x330/0x3d0 net/socket.c:727
  ____sys_sendmsg+0x893/0xd80 net/socket.c:2566
  ___sys_sendmsg+0x271/0x3b0 net/socket.c:2620
  __sys_sendmmsg+0x2d9/0x7c0 net/socket.c:2709

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Reported-by: syzbot+afad90ffc8645324afe5@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/netdev/68887d86.a00a0220.b12ec.00cd.GAE@google.com/T/#u
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Dawid Osuchowski <dawid.osuchowski@linux.intel.com>
Link: https://patch.msgid.link/20250729080207.1863408-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2025-07-30 19:11:16 -07:00
..
accel Merge 6.16-rc3 into driver-core-next 2025-06-23 07:53:36 +02:00
accessibility
acpi Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
amba PM: domains: Add flags to specify power on attach/detach 2025-07-07 20:41:20 +02:00
android Char / Misc / IIO / other driver updates for 6.17-rc1 2025-07-29 09:52:01 -07:00
ata ata: libata-eh: Simplify reset operation management 2025-07-16 09:31:43 +02:00
atm atm: lanai: fix "take a while" typo 2025-07-08 08:27:19 -07:00
auxdisplay
base Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
bcma
block for-6.17/block-20250728 2025-07-28 16:43:54 -07:00
bluetooth Bluetooth: btintel_pcie: Fix Alive Context State Handling 2025-07-23 10:34:30 -04:00
bus soc: driver updates for 6.17 2025-07-29 11:13:27 -07:00
cache
cdrom cdrom: Call cdrom_mrw_exit from cdrom_release function 2025-07-22 19:10:17 -06:00
cdx cdx: Fix missing GENERIC_MSI_IRQ on compile test 2025-07-16 14:17:31 +02:00
char Char / Misc / IIO / other driver updates for 6.17-rc1 2025-07-29 09:52:01 -07:00
clk soc: driver updates for 6.17 2025-07-29 11:13:27 -07:00
clocksource A treewide cleanup of struct cycle_counter const annotations: 2025-07-29 14:02:53 -07:00
comedi Char / Misc / IIO / other driver updates for 6.17-rc1 2025-07-29 09:52:01 -07:00
connector
counter
cpufreq x86/platform changes for v6.17: 2025-07-29 20:05:06 -07:00
cpuidle pmdomain core: 2025-07-29 11:42:31 -07:00
crypto Networking changes for 6.17. 2025-07-30 08:58:55 -07:00
cxl Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
dax
dca
devfreq PM / devfreq: Add HiSilicon uncore frequency scaling driver 2025-07-14 20:23:57 +09:00
dio
dma spidev: introduce trivial abb sensor device 2025-07-21 15:39:07 +01:00
dma-buf dma-buf: fix timeout handling in dma_resv_wait_timeout v2 2025-06-30 13:15:44 +02:00
dpll dpll: zl3073x: Fix build failure 2025-07-26 12:05:33 -07:00
edac - i10nm: 2025-07-29 16:30:38 -07:00
eisa
extcon
firewire
firmware arm64 updates for 6.17: 2025-07-29 20:21:54 -07:00
fpga zynq_fpga: use sgtable-based scatterlist wrappers 2025-06-18 10:36:55 +08:00
fsi Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
fwctl
gnss
gpio gpio updates for v6.17-rc1 2025-07-28 21:58:46 -07:00
gpu Networking changes for 6.17. 2025-07-30 08:58:55 -07:00
greybus greybus: gb-beagleplay: remove unneeded calls to devm_gpiod_put() 2025-07-01 12:29:37 +02:00
hid Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
hsi
hte
hv A missing bit of 66635b0776 ("assorted variants of irqfd setup: 2025-07-28 10:43:46 -07:00
hwmon pwm: Changes for v6.17-rc1 2025-07-28 23:17:46 -07:00
hwspinlock
hwtracing
i2c Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
i3c
idle
iio Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
infiniband Networking changes for 6.17. 2025-07-30 08:58:55 -07:00
input Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
interconnect Char / Misc / IIO / other driver updates for 6.17-rc1 2025-07-29 09:52:01 -07:00
iommu arm64 updates for 6.17: 2025-07-29 20:21:54 -07:00
ipack
irqchip Updates for interrupt chip drivers: 2025-07-29 13:26:05 -07:00
isdn
leds Locking updates for v6.16: 2025-07-29 18:11:32 -07:00
macintosh
mailbox Merge branch 'newsoc/cix-p1' into soc/newsoc 2025-07-21 17:16:16 +02:00
mcb mcb: use sysfs_emit_at() instead of scnprintf() in show functions 2025-07-16 14:17:07 +02:00
md for-6.17/block-20250728 2025-07-28 16:43:54 -07:00
media Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
memory Memory controller drivers for v6.17 2025-07-22 22:47:00 +02:00
memstick memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() 2025-07-16 12:01:09 +02:00
message
mfd regulator: Updates for v6.17 2025-07-28 22:52:02 -07:00
misc Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
mmc MMC core: 2025-07-29 12:05:38 -07:00
most
mtd Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
mux hardening updates for v6.17-rc1 2025-07-28 17:16:12 -07:00
net pptp: ensure minimal skb length in pptp_xmit() 2025-07-30 19:11:16 -07:00
nfc NFC: trf7970a: Create device-tree parameter for RX gain reduction 2025-06-27 15:08:57 -07:00
ntb
nubus
nvdimm block: rename tuple_size field in blk_integrity to metadata_size 2025-07-01 14:00:14 +02:00
nvme for-6.17/block-20250728 2025-07-28 16:43:54 -07:00
nvmem Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
of samples: rust: platform: Add property child and reference args examples 2025-06-25 17:48:41 +02:00
opp
parisc parisc/power: Move soft-power into power.c 2025-07-23 11:52:48 +02:00
parport
pci Networking changes for 6.17. 2025-07-30 08:58:55 -07:00
pcmcia
peci
perf drivers/perf: hisi: Support PMUs with no interrupt 2025-07-14 15:42:16 +01:00
phy phy: qcom: fix error code in snps_eusb2_hsphy_probe() 2025-07-15 20:36:47 +05:30
pinctrl soc: driver updates for 6.17 2025-07-29 11:13:27 -07:00
platform x86/platform changes for v6.17: 2025-07-29 20:05:06 -07:00
pmdomain pmdomain: qcom: rpmhpd: Add Glymur RPMh Power Domains 2025-07-23 12:12:16 +02:00
pnp
power Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
powercap platform-drivers-x86 for v6.17-1 2025-07-28 23:21:28 -07:00
pps pps: fix poll support 2025-07-01 12:29:29 +02:00
ps3
ptp Networking changes for 6.17. 2025-07-30 08:58:55 -07:00
pwm pwm: Changes for v6.17-rc1 2025-07-28 23:17:46 -07:00
rapidio Merge 6.16-rc3 into driver-core-next 2025-06-23 07:53:36 +02:00
ras
regulator regulator: mt6370: Fix spelling mistake in mt6370_regualtor_register 2025-07-24 18:04:38 +01:00
remoteproc remoteproc: imx_rproc: detect and attach to pre-booted remote cores 2025-07-18 12:43:46 +02:00
reset reset: brcmstb: Enable reset drivers for ARCH_BCM2835 2025-07-01 10:37:54 +02:00
rpmsg PM: domains: Add flags to specify power on attach/detach 2025-07-07 20:41:20 +02:00
rtc rtc: pcf2127: add missing semicolon after statement 2025-06-24 16:06:14 +02:00
s390 Networking changes for 6.17. 2025-07-30 08:58:55 -07:00
sbus
scsi Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
sh
siox
slimbus
soc pmdomain core: 2025-07-29 11:42:31 -07:00
soundwire Power management updates for 6.17-rc1 2025-07-28 20:13:36 -07:00
spi Locking updates for v6.16: 2025-07-29 18:11:32 -07:00
spmi
ssb ssb: use new GPIO line value setter callbacks for the second GPIO chip 2025-07-24 09:06:46 +02:00
staging Networking changes for 6.17. 2025-07-30 08:58:55 -07:00
target
tc
tee A fix in the OP-TEE driver for v6.16 2025-07-03 16:26:08 +02:00
thermal Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
thunderbolt thunderbolt: Fix copy+paste error in match_service_id() 2025-07-21 16:33:43 +02:00
tty Summary 2025-07-29 21:43:08 -07:00
ufs scsi: ufs: core: Fix spelling of a sysfs attribute name 2025-06-24 21:22:20 -04:00
uio
usb Driver core changes for 6.17-rc1 2025-07-29 12:15:39 -07:00
vdpa
vfio
vhost Merge branch 'virtio_udp_tunnel_08_07_2025' of https://github.com/pabeni/linux-devel 2025-07-10 13:32:35 -07:00
video
virt - Map the SNP calling area pages too so that OVMF EFI fw can issue SVSM 2025-07-29 17:18:46 -07:00
virtio Networking changes for 6.17. 2025-07-30 08:58:55 -07:00
w1
watchdog
xen
zorro
Kconfig Networking changes for 6.17. 2025-07-30 08:58:55 -07:00
Makefile