From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.linuxfoundation.org ([140.211.169.12]:48078 "EHLO mail.linuxfoundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751409AbdKJNg0 (ORCPT ); Fri, 10 Nov 2017 08:36:26 -0500 Date: Fri, 10 Nov 2017 14:36:36 +0100 From: Greg KH To: Oliver Neukum Cc: stable@vger.kernel.org, linux-usb@vger.kernel.org Subject: Re: [PATCH] USB: fix buffer overflows with parsing CDC headers Message-ID: <20171110133636.GD30012@kroah.com> References: <20171108114307.6209-1-oneukum@suse.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20171108114307.6209-1-oneukum@suse.com> Sender: stable-owner@vger.kernel.org List-ID: On Wed, Nov 08, 2017 at 12:43:07PM +0100, Oliver Neukum wrote: > In newer kernels this issue has been fixed at a central location with > > commit 2e1c42391ff2556387b3cb6308b24f6f65619feb > Author: Greg Kroah-Hartman > Date: Thu Sep 21 16:58:48 2017 +0200 > > USB: core: harden cdc_parse_cdc_header > > on anything older the parsing had not been centralised, so a separate > fix for each driver is necessary. > > Signed-off-by: Oliver Neukum > --- > drivers/net/usb/cdc_ether.c | 9 ++++++++- > drivers/usb/class/cdc-acm.c | 8 +++++++- > drivers/usb/class/cdc-wdm.c | 2 ++ > 3 files changed, 17 insertions(+), 2 deletions(-) What kernel tree is this made against? It doesn't apply to 3.18-stable, and commit 2e1c42391ff2556387b3cb6308b24f6f65619feb is in 4.4 and newer, right? thanks, greg k-h