Jakub Kicinski d5551f4c18 ethtool: cmis: validate fw->size against start_cmd_payload_size ...

cmis_fw_update_start_download() copies start_cmd_payload_size bytes
from the firmware blob into the CDB LPL vendor_data[] payload without
validating that the FW has enough data.

Since the start_cmd_payload_size can only be ~120B an image too short
is most likely corrupted, so reject it.

Fixes: c4f78134d4 ("ethtool: cmis_fw_update: add a layer for supporting firmware update using CDB")
Reviewed-by: Maxime Chevallier <maxime.chevallier@bootlin.com>
Reviewed-by: Danielle Ratson <danieller@nvidia.com>
Link: https://patch.msgid.link/20260522231312.1710836-10-kuba@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2026-05-26 08:19:33 -07:00

..

bitset.c

ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics

2026-05-12 18:45:13 -07:00

bitset.h

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

cabletest.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

channels.c

net, ethtool: Disallow leased real rxqs to be resized

2026-04-09 18:21:46 -07:00

cmis_cdb.c

ethtool: cmis: require exact CDB reply length

2026-05-26 08:19:33 -07:00

cmis_fw_update.c

ethtool: cmis: validate fw->size against start_cmd_payload_size

2026-05-26 08:19:33 -07:00

cmis.h

ethtool: cmis: fix u16-to-u8 truncation of msleep_pre_rpl

2026-05-26 08:19:33 -07:00

coalesce.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

common.c

ethtool: Add RSS indirection table resize helpers

2026-03-23 17:59:54 -07:00

common.h

net: ethtool: add get_rx_ring_count callback to optimize RX ring queries

2025-09-18 07:07:37 -07:00

debug.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

eee.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

eeprom.c

net: ethtool: pass genl_info to the ethnl parse_request operation

2026-03-24 20:14:29 -07:00

features.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

fec.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

ioctl.c

net, ethtool: Disallow leased real rxqs to be resized

2026-04-09 18:21:46 -07:00

linkinfo.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

linkmodes.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

linkstate.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

Makefile

ethtool: netlink: add ETHTOOL_MSG_MSE_GET and wire up PHY MSE access

2025-11-03 18:32:27 -08:00

mm.c

treewide, timers: Rename from_timer() to timer_container_of()

2025-06-08 09:07:37 +02:00

module_fw.h

ethtool: Add ability to flash transceiver modules' firmware

2024-06-28 10:48:23 +01:00

module.c

ethtool: module: fix cleanup if socket used for flashing multiple devices

2026-05-26 08:19:32 -07:00

mse.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

netlink.c

ethtool: module: fix cleanup if socket used for flashing multiple devices

2026-05-26 08:19:32 -07:00

netlink.h

ethtool: module: fix cleanup if socket used for flashing multiple devices

2026-05-26 08:19:32 -07:00

pause.c

net: ethtool: pass genl_info to the ethnl parse_request operation

2026-03-24 20:14:29 -07:00

phc_vclocks.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

phy.c

net: ethtool: phy: avoid NULL deref when PHY driver is unbound

2026-05-12 17:45:12 -07:00

plca.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

privflags.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

pse-pd.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

rings.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

rss.c

ethtool: rss: avoid device context leak on reply-build failure

2026-05-26 08:17:57 -07:00

stats.c

net: ethtool: pass genl_info to the ethnl parse_request operation

2026-03-24 20:14:29 -07:00

strset.c

ethtool: strset: check nla_len overflow

2026-04-12 11:23:50 -07:00

ts.h

net: ethtool: tsinfo: Enhance tsinfo to support several hwtstamp by net topology

2024-12-16 12:51:41 +00:00

tsconfig.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00

tsinfo.c

net: ethtool: pass genl_info to the ethnl parse_request operation

2026-03-24 20:14:29 -07:00

tunnels.c

genetlink: use attrs from struct genl_info

2023-08-15 15:00:45 -07:00

wol.c

net: ethtool: re-order local includes

2026-03-20 19:10:18 -07:00