netdev - Re: [PATCH] net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <d6587783-6aa4-4e13-ae09-b5daa14c5859@lunn.ch>
Date: Mon, 18 Aug 2025 18:33:00 +0200
From: Andrew Lunn <andrew@...n.ch>
To: Yuichiro Tsuji <yuichtsu@...zon.com>
Cc: linux-usb@...r.kernel.org, netdev@...r.kernel.org,
	Andrew Lunn <andrew+netdev@...n.ch>,
	"David S . Miller" <davem@...emloft.net>,
	Eric Dumazet <edumazet@...gle.com>,
	Jakub Kicinski <kuba@...nel.org>, Paolo Abeni <pabeni@...hat.com>,
	syzbot+20537064367a0f98d597@...kaller.appspotmail.com
Subject: Re: [PATCH] net: usb: asix_devices: Fix PHY address mask in MDIO bus
 initialization

On Mon, Aug 18, 2025 at 05:45:07PM +0900, Yuichiro Tsuji wrote:
> Syzbot reported shift-out-of-bounds exception on MDIO bus initialization.
> 
> The PHY address should be masked to 5 bits (0-31). Without this
> mask, invalid PHY addresses could be used, potentially causing issues
> with MDIO bus operations.
> 
> Fix this by masking the PHY address with 0x1f (31 decimal) to ensure
> it stays within the valid range.
> 
> Fixes: 4faff70959d5 ("net: usb: asix_devices: add phy_mask for ax88772 mdio bus")
> Reported-by: syzbot+20537064367a0f98d597@...kaller.appspotmail.com
> Closes: https://syzkaller.appspot.com/bug?extid=20537064367a0f98d597
> Tested-by: syzbot+20537064367a0f98d597@...kaller.appspotmail.com
> Signed-off-by: Yuichiro Tsuji <yuichtsu@...zon.com>

Reviewed-by: Andrew Lunn <andrew@...n.ch>

    Andrew