Thread (2 messages) flat view 2 messages, 2 authors, 20h ago

Re: [PATCH] net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-09-04 23:11:11
Also in: linux-usb

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski [off-list ref]:

On Wed,  2 Sep 2026 10:40:41 +0200 you wrote:
The 0xffff length sentinel detects a router reboot and schedules
re-enabling of ethernet mode, but then falls through to the rest
of the loop body.  The next check is

	} else if (len > CX82310_MTU) {

which is the else of the just-matched if -- it never fires for
len == 0xffff.  The MTU bound that normally caps the
incomplete-packet save path is silently bypassed.

[...]
Here is the summary with links:
  - net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow
    https://git.kernel.org/netdev/net/c/5d50e90add8b

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help