linux-kernel - [for -stable] commit "c82919888064 ath10k: fix scan crash due to incorrect length calculation"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20180906213620.GA72542@ban.mtv.corp.google.com>
Date:   Thu, 6 Sep 2018 14:36:22 -0700
From:   Brian Norris <briannorris@...omium.org>
To:     stable@...r.kernel.org
Cc:     linux-kernel@...r.kernel.org, linux-wireless@...r.kernel.org,
        Zhi Chen <zhichen@...eaurora.org>,
        Kalle Valo <kvalo@...eaurora.org>, ath10k@...ts.infradead.org
Subject: [for -stable] commit "c82919888064 ath10k: fix scan crash due to
 incorrect length calculation"

Hi Greg / stable maintainer(s),

IIUC, this commit is a good candidate for -stable. I just hit the bug on
4.14, because of new vendor firmware that noticed the mismatched length
(an internal "assert"), but it seems like this is equally problematic
from the kernel side for as long as this code existed [1]:

commit c8291988806407e02a01b4b15b4504eafbcc04e0
Author: Zhi Chen <zhichen@...eaurora.org>
Date:   Mon Jun 18 17:00:39 2018 +0300

    ath10k: fix scan crash due to incorrect length calculation

Thanks,
Brian

[1] I guess that would be:

Fixes: ca996ec56608 ("ath10k: implement wmi-tlv backend")

which was in v4.0.