diff options
| author | Vincent Mailhol <[email protected]> | 2025-02-04 15:48:15 +0000 |
|---|---|---|
| committer | Marc Kleine-Budde <[email protected]> | 2025-02-08 11:41:43 +0000 |
| commit | a1ad2109ce41c9e3912dadd07ad8a9c640064ffb (patch) | |
| tree | ace439ad9fc3f537d021e461b1010b054513dbe7 /drivers/net/ethernet/intel/igc/igc_main.c | |
| parent | can: c_can: fix unbalanced runtime PM disable in error path (diff) | |
| download | kernel-a1ad2109ce41c9e3912dadd07ad8a9c640064ffb.tar.gz kernel-a1ad2109ce41c9e3912dadd07ad8a9c640064ffb.zip | |
can: etas_es58x: fix potential NULL pointer dereference on udev->serial
The driver assumed that es58x_dev->udev->serial could never be NULL.
While this is true on commercially available devices, an attacker
could spoof the device identity providing a NULL USB serial number.
That would trigger a NULL pointer dereference.
Add a check on es58x_dev->udev->serial before accessing it.
Reported-by: yan kang <[email protected]>
Reported-by: yue sun <[email protected]>
Closes: https://lore.kernel.org/linux-can/SY8P300MB0421E0013C0EBD2AA46BA709A1F42@SY8P300MB0421.AUSP300.PROD.OUTLOOK.COM/
Fixes: 9f06631c3f1f ("can: etas_es58x: export product information through devlink_ops::info_get()")
Signed-off-by: Vincent Mailhol <[email protected]>
Link: https://patch.msgid.link/[email protected]
Cc: [email protected]
Signed-off-by: Marc Kleine-Budde <[email protected]>
Diffstat (limited to 'drivers/net/ethernet/intel/igc/igc_main.c')
0 files changed, 0 insertions, 0 deletions