linux-kernel - Re: [PATCH] HID: mcp2221: fix slab-out-of-bounds in mcp2221_raw

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <89qopp26-1556-2763-s9q5-9o5799qq127o@xreary.bet>
Date: Fri, 31 Oct 2025 10:19:57 +0100 (CET)
From: Jiri Kosina <jikos@...nel.org>
To: Atharv Dubey <atharvd440@...il.com>
cc: Benjamin Tissoires <bentiss@...nel.org>, linux-input@...r.kernel.org, 
    linux-kernel@...r.kernel.org
Subject: Re: [PATCH] HID: mcp2221: fix slab-out-of-bounds in mcp2221_raw_event()
 Inbox

On Sun, 26 Oct 2025, Atharv Dubey wrote:

> From: Atharv Dubey <atharvd440@...il.com <athrvd440@...il.com>>
> 
> A negative idx value could cause a slab-out-of-bounds access
> when indexing the report buffer in mcp2221_raw_event().
> 
> Add a check to ensure that idx is greater than or equal to zero
> before accessing the buffer, preventing invalid memory access
> and potential kernel crashes.
> 
> Fixes: 3a8660878839 ("KASAN: slab-out-of-bounds Read in mcp2221_raw_event
> (2)")
> Reported-by: syzbot+1018672fe70298606e5f@...kaller.appspotmail.com
> Signed-off-by: Atharv Dubey <atharvd440@...il.com>

Thanks a lot for the fix.

The patch has however been line-wrapped and damaged by yolur mail client. 
Could you please look [1] into fixing that and resubmit?

[1] https://docs.kernel.org/process/email-clients.html

Thanks,

-- 
Jiri Kosina
SUSE Labs