diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2023-08-07 17:25:19 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2023-08-07 17:25:19 -0700 |
| commit | da703fe9416d7a03058432ccc27b898504b1383d (patch) | |
| tree | 2a64caeb1d1aa339e17c47925505722c604f9894 /fs | |
| parent | 64094e7e3118aff4b0be8ff713c242303e139834 (diff) | |
| parent | 534fc31d09b706a16d83533e16b5dc855caf7576 (diff) | |
| download | lwn-da703fe9416d7a03058432ccc27b898504b1383d.tar.gz lwn-da703fe9416d7a03058432ccc27b898504b1383d.zip | |
Merge tag 'xsa432-6.5-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip
Pull xen netback buffer overflow fix from Juergen Gross:
"The fix for XSA-423 added logic to Linux'es netback driver to deal
with a frontend splitting a packet in a way such that not all of the
headers would come in one piece.
Unfortunately the logic introduced there didn't account for the
extreme case of the entire packet being split into as many pieces as
permitted by the protocol, yet still being smaller than the area
that's specially dealt with to keep all (possible) headers together.
Such an unusual packet would therefore trigger a buffer overrun in the
driver"
* tag 'xsa432-6.5-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip:
xen/netback: Fix buffer overrun triggered by unusual packet
Diffstat (limited to 'fs')
0 files changed, 0 insertions, 0 deletions