Re: [PATCH v3] staging: rtl8723bs: fix heap buffer overflow in cfg80211_rtw_add_key

["Luka Gejak" <luka.gejak@linux.dev>]

On Wed Apr 8, 2026 at 5:00 PM CEST, Feng Ning wrote:
> The cfg80211 framework allows key sequence counters (NL80211_KEY_SEQ)
> up to 16 bytes, but ieee_param.crypt.seq is a fixed 8-byte buffer.
> When cfg80211_rtw_add_key() copies the sequence counter via memcpy()
> without checking seq_len, a heap buffer overflow of up to 8 bytes
> occurs, overwriting adjacent fields key_len and key[].
>
> Cap the copy length at the buffer size using min_t().
>
> Fixes: 554c0a3abf21 ("staging: Add rtl8723bs sdio wifi driver")
> Signed-off-by: Feng Ning <feng@innora.ai>
> ---
> Changes v2 -> v3:
>   - Added changelog below the cut line (per patch-bot feedback)
>   - No code changes from v2
>
> Changes v1 -> v2:
>   - Initial public submission to linux-staging mailing list
>

...

Hi Feng,
thanks for v3, however this patch can not be accepted as is.
First, of all you should configure and use git send-email for submiting 
patches as your emails should be pure plaintext.
Secondly, your emails contain attachments which are not accepted for 
patches.
Thirdly, you should not include your gpg key because as I previously 
said no attachments.
Please read Documentation/process/submitting-patches.rst file for more 
info. Logic itself is sound.
Best regards,
Luka Gejak