diff options
| author | Luka Gejak <luka.gejak@linux.dev> | 2026-05-23 16:03:30 +0300 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-05-26 00:18:15 +0300 |
| commit | f229426072fc865654a60978bb7fda790a051ff3 (patch) | |
| tree | 8d915853b4818ad5467d095bc811d7e532356fd8 /include/linux/timerqueue.h | |
| parent | 2156a29aecfffa2eb7c558255690084efbe9f3b0 (diff) | |
| download | linux-f229426072fc865654a60978bb7fda790a051ff3.tar.xz | |
net: hsr: fix potential OOB access in supervision frame handling
Ensure the entire TLV header is linearized before access by adding
sizeof(struct hsr_sup_tlv) to the pskb_may_pull() calls. Without this,
a truncated frame could cause an out-of-bounds access.
Fixes: eafaa88b3eb7 ("net: hsr: Add support for redbox supervision frames")
Signed-off-by: Luka Gejak <luka.gejak@linux.dev>
Reviewed-by: Fernando Fernandez Mancera <fmancera@suse.de>
Link: https://patch.msgid.link/20260523130330.61880-1-luka.gejak@linux.dev
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'include/linux/timerqueue.h')
0 files changed, 0 insertions, 0 deletions