[SECURITY] net/nfc/llcp_sock.c: unsafe userspace sockaddr handling
Cyber_black <[email protected]> Sat, 30 May 2026 18:26:07 +0000
| Newsgroups | dev.linux.lists.oe-linux-nfc,org.kernel.vger.netdev |
|---|---|
| Message-ID | <PYXMRVOSKGaZwZAeXC2PScmTBrZhHXwgdSapPlE030ObXXtRedDcbPD2lx6-3lzLWqr3aB2Kf9eAbDig3HuXn2gw3cSaZhqUA5U9HrSVhC8=@proton.me> |
Greg, please disregard my previous report. After testing with a POC (which returned -EFAULT, no crash) and reviewing the call chain (__sys_bind → move_addr_to_kernel), I confirm that the sockaddr pointer passed to llcp_sock_bind() already points to kernel memory. Thus there is no security issue. My apologies for the noise. Signed-off-by: Eneshan Erdogan Karaca <[email protected]>