diff options
| author | Johan Hovold <johan@kernel.org> | 2026-05-22 12:16:21 +0200 |
|---|---|---|
| committer | Johan Hovold <johan@kernel.org> | 2026-05-22 16:07:08 +0200 |
| commit | e1a9d791fd66ab2431b9e6f6f835823809869047 (patch) | |
| tree | 140e6631471e27b1fa02788df0731191c04f2a42 /scripts/kernel-doc | |
| parent | 689f2facc689c8add11d7ff69fbbad17d65ee596 (diff) | |
USB: serial: cypress_m8: fix memory corruption with small endpoint
Make sure that the interrupt-out endpoint max packet size is at least
eight bytes to avoid user-controlled slab corruption or NULL-pointer
dereference should a malicious device report a smaller size.
Fixes: 3416eaa1f8f8 ("USB: cypress_m8: Packet format is separate from characteristic size")
Cc: stable@vger.kernel.org # 2.6.26
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Diffstat (limited to 'scripts/kernel-doc')
0 files changed, 0 insertions, 0 deletions