linux-kernel - Re: [PATCH] net: dsa: sja1105: fix slab-out-of-bounds in sja1105

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20221206152630.lypso2kbh6gwwlse@skbuf>
Date:   Tue, 6 Dec 2022 17:26:30 +0200
From:   Vladimir Oltean <olteanv@...il.com>
To:     "Radu Nicolae Pirea (OSS)" <radu-nicolae.pirea@....nxp.com>
Cc:     gregkh@...uxfoundation.org, netdev@...r.kernel.org,
        stable@...r.kernel.org, linux-kernel@...r.kernel.org,
        andrew@...n.ch, pabeni@...hat.com, kuba@...nel.org,
        edumazet@...gle.com, davem@...emloft.net, f.fainelli@...il.com,
        Radu Pirea <radu-nicolae.pirea@....com>
Subject: Re: [PATCH] net: dsa: sja1105: fix slab-out-of-bounds in
 sja1105_setup

On Tue, Dec 06, 2022 at 05:11:36PM +0200, Radu Nicolae Pirea (OSS) wrote:
> From: Radu Pirea <radu-nicolae.pirea@....com>
> 
> Fix slab-out-of-bounds in sja1105_setup.
> 
> Signed-off-by: Radu Pirea <radu-nicolae.pirea@....com>
> ---
>  drivers/net/dsa/sja1105/sja1105_main.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> Can be applied on top of 5.15.81 stable branch.

Here the backporting process has to work differently.

Since the fixed code is also present in the master branch of the tree
responsible with bug fixes for this code area
(https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git), you
have to base your patch on that tree, and send the patch to be applied
by the netdev maintainers, not by stable directly. You do that by using
git send-email --subject-prefix "PATCH v2 net". You also don't CC stable
and Greg, just the networking people from ./scripts/get_maintainer.pl.
After a while, the patch will land automatically in stable, through the
"net" tree.

You must also add this above your Signed-off-by tag:

Fixes: 38fbe91f2287 ("net: dsa: sja1105: configure the multicast policers, if present")