Felix Fietkau 319478cbd2 mt76: fix array overflow on receiving too many fragments for a packet ... commit b102f0c522cf668c8382c56a4f771b37d011cda2 upstream. If the hardware receives an oversized packet with too many rx fragments, skb_shinfo(skb)->frags can overflow and corrupt memory of adjacent pages. This becomes especially visible if it corrupts the freelist pointer of a slab page. Cc: stable@vger.kernel.org Signed-off-by: Felix Fietkau <nbd@nbd.name> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-03-18 07:14:22 +01:00
..
mt76	mt76: fix array overflow on receiving too many fragments for a packet	2020-03-18 07:14:22 +01:00
mt7601u	mt7601u: fix bbp version check in mt7601u_wait_bbp_ready	2020-01-27 14:49:52 +01:00
Kconfig
Makefile