netdev - Re: [PATCH net] eth: bnxt: fix out-of-range access of vnic

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CACKFLi=tEV2y48rU2nNra1Uhur-mhsUwZujjSur0t72_xOp16A@mail.gmail.com>
Date: Sun, 16 Mar 2025 16:03:00 -0700
From: Michael Chan <michael.chan@...adcom.com>
To: Taehee Yoo <ap420073@...il.com>
Cc: davem@...emloft.net, kuba@...nel.org, pabeni@...hat.com, 
	edumazet@...gle.com, andrew+netdev@...n.ch, netdev@...r.kernel.org, 
	pavan.chebbi@...adcom.com, somnath.kotur@...adcom.com
Subject: Re: [PATCH net] eth: bnxt: fix out-of-range access of vnic_info array

On Sat, Mar 15, 2025 at 7:58 PM Taehee Yoo <ap420073@...il.com> wrote:
>
> The bnxt_queue_{start | stop}() access vnic_info as much as allocated,
> which indicates bp->nr_vnics.
> So, it should not reach bp->vnic_info[bp->nr_vnics].
>
> Fixes: 661958552eda ("eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic")
> Signed-off-by: Taehee Yoo <ap420073@...il.com>

Thanks.
Reviewed-by: Michael Chan <michael.chan@...adcom.com>

Download attachment "smime.p7s" of type "application/pkcs7-signature" (4196 bytes)