mirrors/linux
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-04-02 03:30:08 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
162d331d833dc73a3e905a24c44dd33732af1fc5
linux/net
History
Ariel Silver 162d331d83 wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration 
link_id is taken from the ML Reconfiguration element (control & 0x000f),
so it can be 0..15. link_removal_timeout[] has IEEE80211_MLD_MAX_NUM_LINKS
(15) elements, so index 15 is out-of-bounds. Skip subelements with
link_id >= IEEE80211_MLD_MAX_NUM_LINKS to avoid a stack out-of-bounds
write.

Fixes: 8eb8dd2ffb ("wifi: mac80211: Support link removal using Reconfiguration ML element")
Reported-by: Ariel Silver <arielsilver77@gmail.com>
Signed-off-by: Ariel Silver <arielsilver77@gmail.com>
Cc: stable@vger.kernel.org
Link: https://patch.msgid.link/20260220101129.1202657-1-Ariel.Silver@cybereason.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
2026-02-23 12:35:34 +01:00
..
6lowpan
net: replace ND_PRINTK with dynamic debug
2025-07-10 15:27:32 -07:00
9p
9p/xen: protect xen_9pfs_front_free against concurrent calls
2026-01-29 23:48:33 +00:00
802
net: remove HIPPI support and RoadRunner HIPPI driver
2026-01-20 19:12:06 -08:00
8021q
net: vlan: sync VLAN features with lower device
2025-10-31 17:42:35 -07:00
appletalk
net: Convert proto_ops connect() callbacks to use sockaddr_unsized
2025-11-04 19:10:32 -08:00
atm
net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
2026-02-10 11:24:47 +01:00
ax25
net: ax25: remove plumbing for never-implemented DAMA Master support
2026-01-30 19:19:39 -08:00
batman-adv
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-10-31 06:46:03 -07:00
bluetooth
Merge tag 'net-next-7.0' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2026-02-11 19:31:52 -08:00
bpf
bpf: add fsession support
2026-01-24 18:49:35 -08:00
bridge
Merge tag 'net-7.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-02-19 10:39:08 -08:00
caif
caif: fix integer underflow in cffrml_receive()
2025-12-11 01:35:41 -08:00
can
can: gw: use can_gw_hops instead of sk_buff::csum_start
2026-02-05 11:58:40 +01:00
ceph
libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing
2026-02-09 12:29:22 +01:00
core
Merge tag 'net-7.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-02-19 10:39:08 -08:00
dcb
Revert "Documentation: net: add flow control guide and document ethtool API"
2025-10-01 09:48:21 +02:00
devlink
devlink: Refactor devlink_rate_nodes_check
2026-02-02 20:05:51 -08:00
dns_resolver
net/dns_resolver: use credential guards in dns_query()
2025-11-04 12:36:51 +01:00
dsa
net: dsa: add tag format for MxL862xx switches
2026-02-11 11:27:57 +01:00
ethernet
net: optimize eth_type_trans() vs CONFIG_STACKPROTECTOR_STRONG=y
2025-11-24 19:27:31 -08:00
ethtool
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-02-05 09:54:08 -08:00
handshake
net/handshake: Fix null-ptr-deref in handshake_complete()
2025-12-22 12:36:40 +01:00
hsr
hsr: Implement more robust duplicate discard for HSR
2026-02-10 12:02:29 +01:00
ieee802154
net: Convert proto callbacks from sockaddr to sockaddr_unsized
2025-11-04 19:10:33 -08:00
ife
…
ipv4
Merge tag 'net-7.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-02-19 10:39:08 -08:00
ipv6
ipv6: icmp: icmpv6_xrlim_allow() optimization if net.ipv6.icmp.ratelimit is zero
2026-02-18 16:46:37 -08:00
iucv
net/iucv: clean up iucv kernel-doc warnings
2026-02-04 20:39:58 -08:00
kcm
Merge tag 'net-next-6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2025-12-03 17:24:33 -08:00
key
pfkey: Deprecate pfkey
2025-10-30 09:03:12 +01:00
l2tp
l2tp: avoid one data-race in l2tp_tunnel_del_work()
2026-01-19 09:55:41 -08:00
l3mdev
net: fib_rules: Fix iif / oif matching on L3 master device
2025-04-15 17:54:56 -07:00
lapb
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
llc
net: Convert proto_ops connect() callbacks to use sockaddr_unsized
2025-11-04 19:10:32 -08:00
mac80211
wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration
2026-02-23 12:35:34 +01:00
mac802154
mac802154: Switch to use hrtimer_setup()
2025-02-18 10:35:44 +01:00
mctp
net: mctp: ensure our nlmsg responses are initialised
2026-02-12 18:35:45 -08:00
mpls
mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE.
2025-11-03 17:40:54 -08:00
mptcp
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-02-11 15:14:35 +01:00
ncsi
net: ncsi: Fix buffer overflow in fetching version id
2025-06-12 18:21:59 -07:00
netfilter
netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
2026-02-17 15:04:20 +01:00
netlabel
audit: add record for multiple task security contexts
2025-08-30 10:15:30 -04:00
netlink
net: Convert proto_ops connect() callbacks to use sockaddr_unsized
2025-11-04 19:10:32 -08:00
netrom
netrom: fix double-free in nr_route_frame()
2026-01-20 19:15:40 -08:00
nfc
net: nfc: nci: Fix parameter validation for packet data
2026-02-19 09:32:51 -08:00
nsh
…
openvswitch
net: openvswitch: fix data race in ovs_vport_get_upcall_stats
2026-01-22 12:55:22 +01:00
packet
net: add vlan_get_protocol_offset_inline() helper
2026-02-05 16:33:52 +01:00
phonet
net: Convert proto callbacks from sockaddr to sockaddr_unsized
2025-11-04 19:10:33 -08:00
psample
…
psp
net: psp: select CONFIG_SKB_EXTENSIONS
2026-02-17 17:05:29 -08:00
qrtr
net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels
2025-12-31 16:24:04 +05:30
rds
rds: tcp: fix uninit-value in __inet_bind
2026-02-19 16:05:56 +01:00
rfkill
net: replace use of system_wq with system_percpu_wq
2025-09-22 17:40:30 -07:00
rose
net: rose: fix invalid array index in rose_kill_by_device()
2025-12-30 11:45:51 +01:00
rxrpc
rxrpc: Fix data-race warning and potential load/store tearing
2026-01-21 19:59:29 -08:00
sched
net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
2026-02-17 17:27:39 -08:00
sctp
sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
2026-01-17 15:10:34 -08:00
shaper
tools: ynl-gen: add regeneration comment
2025-11-25 19:20:42 -08:00
smc
Revert "net/smc: Introduce TCP ULP support"
2026-01-30 19:21:51 -08:00
strparser
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-11-13 12:35:38 -08:00
sunrpc
Merge tag 'nfs-for-7.0-1' of git://git.linux-nfs.org/projects/anna/linux-nfs
2026-02-12 17:49:33 -08:00
switchdev
net: switchdev: Convert blocking notification chain to a raw one
2025-03-11 11:30:28 +01:00
tipc
Merge tag 'mm-nonmm-stable-2026-02-12-10-48' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2026-02-12 12:13:01 -08:00
tls
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-10-31 06:46:03 -07:00
unix
af_unix: Fix memleak of newsk in unix_stream_connect().
2026-02-11 13:01:13 +01:00
vmw_vsock
Merge tag 'net-7.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-02-19 10:39:08 -08:00
wireless
wifi: radiotap: reject radiotap with unknown bits
2026-02-23 09:23:44 +01:00
x25
net: Convert proto_ops connect() callbacks to use sockaddr_unsized
2025-11-04 19:10:32 -08:00
xdp
Revert "Merge branch 'netkit-support-for-io_uring-zero-copy-and-af_xdp'"
2026-01-20 18:06:01 -08:00
xfrm
Merge tag 'bpf-next-7.0' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
2026-02-10 11:26:21 -08:00
compat.c
socket: Unify getsockname and getpeername implementation
2025-11-26 13:45:23 -07:00
devres.c
…
Kconfig
net: Kconfig: discourage drop_monitor enablement
2025-10-17 16:29:26 -07:00
Kconfig.debug
…
Makefile
psp: base PSP device support
2025-09-18 12:32:06 +02:00
socket.c
Merge tag 'vfs-6.19-rc1.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-05 15:52:30 -08:00
sysctl_net.c
…