Re: [PATCH v2 net] net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
| Newsgroups | gmane.linux.network |
|---|---|
| Message-ID | <178603503263.1375455.12985449787644738517.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Wed, 5 Aug 2026 13:15:08 +0000 you wrote: > vcc_setsockopt() contained an ineffective optlen check: > if (__SO_LEVEL_MATCH(optname, level) && optlen != __SO_SIZE(optname)) > return -EINVAL; > > If __SO_LEVEL_MATCH(optname, level) evaluated to false (e.g. if the caller > passed a mismatched level), the length check optlen != __SO_SIZE(optname) > was short-circuited and bypassed. Execution then fell through to switch(optname), > calling copy_from_sockptr() assuming optval contained sufficient space. > > [...] Here is the summary with links: - [v2,net] net/atm: fix slab-out-of-bounds read in vcc_setsockopt() https://git.kernel.org/netdev/net/c/d0c80dbb9704 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html