can: fix can-gw Out-of-Bounds Heap R/W and isotp UAF

[PATCH can v2 0/2] can: fix can-gw Out-of-Bounds Heap R/W and isotp UAF

Marc Kleine-Budde posted 2 patches 2 weeks, 3 days ago

Download series mbox

net/can/gw.c    |  6 +++---
net/can/isotp.c | 24 ++++++++++++++++++------
2 files changed, 21 insertions(+), 9 deletions(-)

Expand all Fold all

[PATCH can v2 0/2] can: fix can-gw Out-of-Bounds Heap R/W and isotp UAF

Posted by Marc Kleine-Budde 2 weeks, 3 days ago

This series is by Ali Norouzi and Oliver Hartkopp fixing a can-gw
Out-of-Bounds Heap R/W and can-isotp UAF.

Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
---
Ali Norouzi (1):
      can: gw: fix OOB heap access in cgw_csum_crc8_rel()

Oliver Hartkopp (1):
      can: isotp: fix tx.buf use-after-free in isotp_sendmsg()

 net/can/gw.c    |  6 +++---
 net/can/isotp.c | 24 ++++++++++++++++++------
 2 files changed, 21 insertions(+), 9 deletions(-)
---
base-commit: 8a63baadf08453f66eb582fdb6dd234f72024723
change-id: 20260319-fix-can-gw-and-can-isotp-59227c217066

Best regards,
--  
Marc Kleine-Budde <mkl@pengutronix.de>

Re: [PATCH can v2 0/2] can: fix can-gw Out-of-Bounds Heap R/W and isotp UAF

Posted by Marc Kleine-Budde 1 week, 6 days ago

On 19.03.2026 16:47:43, Marc Kleine-Budde wrote:
> This series is by Ali Norouzi and Oliver Hartkopp fixing a can-gw
> Out-of-Bounds Heap R/W and can-isotp UAF.
>
> Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>

Applied to can-testing.

Thanks,
Marc

-- 
Pengutronix e.K.                 | Marc Kleine-Budde          |
Embedded Linux                   | https://www.pengutronix.de |
Vertretung Nürnberg              | Phone: +49-5121-206917-129 |
Amtsgericht Hildesheim, HRA 2686 | Fax:   +49-5121-206917-9   |