linux-kernel - Re: [PATCH] hwmon: (corsair-cpro) Validate the size of the received input buffer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <ffdbf2c2-81a2-4165-b37f-f89a0f90afd0@roeck-us.net>
Date: Thu, 19 Jun 2025 09:51:17 -0700
From: Guenter Roeck <linux@...ck-us.net>
To: Marius Zachmann <mail@...iuszachmann.de>
Cc: linux-hwmon@...r.kernel.org, linux-kernel@...r.kernel.org,
	jdelvare@...e.com,
	syzbot+3bbbade4e1a7ab45ca3b@...kaller.appspotmail.com
Subject: Re: [PATCH] hwmon: (corsair-cpro) Validate the size of the received
 input buffer

On Thu, Jun 19, 2025 at 03:27:47PM +0200, Marius Zachmann wrote:
> Add buffer_recv_size to store the size of the received bytes.
> Validate buffer_recv_size in send_usb_cmd().
> 
> Reported-by: syzbot+3bbbade4e1a7ab45ca3b@...kaller.appspotmail.com
> Closes: https://lore.kernel.org/linux-hwmon/61233ba1-e5ad-4d7a-ba31-3b5d0adcffcc@roeck-us.net
> Fixes: 40c3a4454225 ("hwmon: add Corsair Commander Pro driver")
> Signed-off-by: Marius Zachmann <mail@...iuszachmann.de>

Applied.

Thanks,
Guenter