Thread (11 messages) 11 messages, 3 authors, 2025-09-24

Re: [PATCH net 1/7] can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled

From: patchwork-bot+netdevbpf@kernel.org
Date: 2025-09-24 00:00:22
Also in: linux-can

Hello:

This series was applied to netdev/net.git (main)
by Marc Kleine-Budde [off-list ref]:

On Tue, 23 Sep 2025 09:32:47 +0200 you wrote:
From: Chen Yufeng <redacted>

This issue is similar to the vulnerability in the `mcp251x` driver,
which was fixed in commit 03c427147b2d ("can: mcp251x: fix resume from
sleep before interface was brought up").

In the `hi311x` driver, when the device resumes from sleep, the driver
schedules `priv->restart_work`. However, if the network interface was
not previously enabled, the `priv->wq` (workqueue) is not allocated and
initialized, leading to a null pointer dereference.

[...]
Here is the summary with links:
  - [net,1/7] can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
    https://git.kernel.org/netdev/net/c/6b6968084721
  - [net,2/7] can: rcar_canfd: Fix controller mode setting
    https://git.kernel.org/netdev/net/c/5cff263606a1
  - [net,3/7] can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
    https://git.kernel.org/netdev/net/c/38c0abad45b1
  - [net,4/7] can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
    https://git.kernel.org/netdev/net/c/ac1c7656fa71
  - [net,5/7] can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
    https://git.kernel.org/netdev/net/c/61da0bd4102c
  - [net,6/7] can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
    https://git.kernel.org/netdev/net/c/17c8d794527f
  - [net,7/7] can: peak_usb: fix shift-out-of-bounds issue
    https://git.kernel.org/netdev/net/c/c443be70aaee

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help