Re: [Linux-stable-mirror] [PATCH] USB: fix buffer overflows with parsing CDC headers

On Wed, Nov 08, 2017 at 12:43:07PM +0100, Oliver Neukum wrote:

In newer kernels this issue has been fixed at a central location with

commit 2e1c42391ff2556387b3cb6308b24f6f65619feb Author: Greg Kroah-Hartman gregkh@linuxfoundation.org Date: Thu Sep 21 16:58:48 2017 +0200

USB: core: harden cdc_parse_cdc_header

on anything older the parsing had not been centralised, so a separate fix for each driver is necessary.

Signed-off-by: Oliver Neukum oneukum@suse.com

drivers/net/usb/cdc_ether.c | 9 ++++++++- drivers/usb/class/cdc-acm.c | 8 +++++++- drivers/usb/class/cdc-wdm.c | 2 ++ 3 files changed, 17 insertions(+), 2 deletions(-)

What kernel tree is this made against? It doesn't apply to 3.18-stable, and commit 2e1c42391ff2556387b3cb6308b24f6f65619feb is in 4.4 and newer, right?

thanks,

greg k-h