All of lore.kernel.org
 help / color / mirror / Atom feed
From: Greg KH <gregkh@linuxfoundation.org>
To: Magal Baz <mbaz@fb.com>
Cc: "aspriel@gmail.com" <aspriel@gmail.com>,
	"linux-wireless@vger.kernel.org" <linux-wireless@vger.kernel.org>,
	"brcm80211-dev-list.pdl@broadcom.com" 
	<brcm80211-dev-list.pdl@broadcom.com>
Subject: Re: Vulnerabilities in the brcmfmac driver
Date: Mon, 22 Aug 2022 21:51:48 +0200	[thread overview]
Message-ID: <YwPeVBeohpcd06A0@kroah.com> (raw)
In-Reply-To: <03D5D6F4-4471-4379-BF53-464DAA37C4B2@fb.com>

On Mon, Aug 22, 2022 at 07:43:14PM +0000, Magal Baz wrote:
> Hi Greg, Valid points, my bad :)
> 
> Please see the details below as textt:

<snip>

Also note that Linux kernel drivers trust the hardware for the most
part.  If you can get control over a spi or spio bus, then of course all
bets are off, that is not the Linux security model at all.  So if you
care about invalid data on that bus, please work on auditing and fixing
up all kernel drivers for that subsystem as this is a totally new threat
model that no one has ever handled for this operating system (and one
that no one ever said we were secure from.)

thanks,

greg k-h

      parent reply	other threads:[~2022-08-22 19:51 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <97D835D2-29C5-4C86-8602-4C02C61DB28C@fb.com>
2022-08-22 19:33 ` Vulnerabilities in the brcmfmac driver Greg KH
     [not found]   ` <03D5D6F4-4471-4379-BF53-464DAA37C4B2@fb.com>
2022-08-22 19:49     ` Greg KH
2022-08-22 19:51     ` Greg KH [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=YwPeVBeohpcd06A0@kroah.com \
    --to=gregkh@linuxfoundation.org \
    --cc=aspriel@gmail.com \
    --cc=brcm80211-dev-list.pdl@broadcom.com \
    --cc=linux-wireless@vger.kernel.org \
    --cc=mbaz@fb.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.