From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 677DC19E968 for ; Sun, 10 May 2026 16:20:27 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778430027; cv=none; b=XhVFhta5EmejPrbgEkzP4zVWPwGcPk0o9MEK+DIx23m0HqLri9Jce4kj7dQg+jwnadW/haPLqiEBC1+gKQI5XeQYX2ZFbOAY/IcISOXDpcBwqXq7Zd6u89pt+dpP8TUGO9nMoqrTzEO9A4EynOcqJgIBcmcKEun50+PMUnh08+A= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778430027; c=relaxed/simple; bh=8gFRMkezAYTRP2RwR0g/HvwSo+83z/+8bBJDrsy1Ejs=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=jthoHaUPkDTwuN6MSqauj/BN2+YGQBX70WtAnTSfe/hfPdP3Z5KzlE67Iw1Q+ZSIJqwhKnZTRGBV7LvZplrX0Dp9DPw58Blkqo4a7KnHkAoIe3lwFQgRD7LdkeogvPgBsglx5vzF5gkB7ZayGUsxrwAKuEzCnOY71JS6VKBxbMY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=ja5o61KN; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="ja5o61KN" Received: by smtp.kernel.org (Postfix) with ESMTPSA id B7C96C2BCB8; Sun, 10 May 2026 16:20:26 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1778430027; bh=8gFRMkezAYTRP2RwR0g/HvwSo+83z/+8bBJDrsy1Ejs=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=ja5o61KNfuapEgDia3kD2lBiHVMXYdpowI83wv5fGd83w9yx6u9hHRzbgMEnm2X4t e7DIvNDKjtjqFbq+li9UPsiQC245BpfWrSwQYG8yIlLPJaI33djLuWBbauqxO4oefY +D2XTvy1r9L4w1QykTr8VEEx9oTQOzoR97eQ2EQM= Date: Sun, 10 May 2026 18:19:43 +0200 From: Greg KH To: Jinmo Yang Cc: security@kernel.org, lains@riseup.net, hadess@hadess.net, jikos@kernel.org, bentiss@kernel.org, stable@vger.kernel.org Subject: Re: [PATCH] HID: logitech-hidpp: fix slab-out-of-bounds write in HIDPP_FF_DESTROY_EFFECT Message-ID: <2026051043-spender-immovable-f9db@gregkh> References: <20260510132917.335796-1-jinmo44.yang@gmail.com> <20260510133118.337026-1-jinmo44.yang@gmail.com> Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20260510133118.337026-1-jinmo44.yang@gmail.com> On Sun, May 10, 2026 at 10:31:18PM +0900, Jinmo Yang wrote: > Add a missing bounds check in hidpp_ff_work_handler() for the > HIDPP_FF_DESTROY_EFFECT case. As you sent this to a public list, there is no need to cc: the security list. Also, what about the patch series that was recently sent to the HID list for adding bounds checking to some of the apis? Is your patch still needed with that series applied? thanks, greg k-h