linux-kernel - Re: [for -stable] commit "c82919888064 ath10k: fix scan crash due to incorrect length calculation"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20181011141422.GD9507@kroah.com>
Date:   Thu, 11 Oct 2018 16:14:22 +0200
From:   Greg KH <greg@...ah.com>
To:     Brian Norris <briannorris@...omium.org>
Cc:     stable@...r.kernel.org, linux-kernel@...r.kernel.org,
        linux-wireless@...r.kernel.org, Zhi Chen <zhichen@...eaurora.org>,
        Kalle Valo <kvalo@...eaurora.org>, ath10k@...ts.infradead.org
Subject: Re: [for -stable] commit "c82919888064 ath10k: fix scan crash due to
 incorrect length calculation"

On Thu, Sep 06, 2018 at 02:36:22PM -0700, Brian Norris wrote:
> Hi Greg / stable maintainer(s),
> 
> IIUC, this commit is a good candidate for -stable. I just hit the bug on
> 4.14, because of new vendor firmware that noticed the mismatched length
> (an internal "assert"), but it seems like this is equally problematic
> from the kernel side for as long as this code existed [1]:
> 
> commit c8291988806407e02a01b4b15b4504eafbcc04e0
> Author: Zhi Chen <zhichen@...eaurora.org>
> Date:   Mon Jun 18 17:00:39 2018 +0300
> 
>     ath10k: fix scan crash due to incorrect length calculation
> 
> Thanks,
> Brian
> 
> [1] I guess that would be:
> 
> Fixes: ca996ec56608 ("ath10k: implement wmi-tlv backend")
> 
> which was in v4.0.

Thanks, now queued up.

greg k-h