michael/linux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Files
linux-6.12.y
linux/net/wireless
History
Eric Dumazet 024f71a57d wifi: avoid kernel-infoleak from struct iw_point 
commit 21cbf883d0 upstream.

struct iw_point has a 32bit hole on 64bit arches.

struct iw_point {
  void __user   *pointer;       /* Pointer to the data  (in user space) */
  __u16         length;         /* number of fields or size in bytes */
  __u16         flags;          /* Optional params */
};

Make sure to zero the structure to avoid disclosing 32bits of kernel data
to user space.

Fixes: 87de87d5e4 ("wext: Dispatch and handle compat ioctls entirely in net/wireless/wext.c")
Reported-by: syzbot+bfc7323743ca6dbcc3d3@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/netdev/695f83f3.050a0220.1c677c.0392.GAE@google.com/T/#u
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: stable@vger.kernel.org
Link: https://patch.msgid.link/20260108101927.857582-1-edumazet@google.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2026-01-17 16:31:17 +01:00
..
certs
wifi: cfg80211: fix certs build to not depend on file order
2023-12-14 09:11:51 +01:00
tests
wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()
2025-02-08 09:57:02 +01:00
.gitignore
…
ap.c
wifi: cfg80211: remove wdev mutex
2023-09-11 11:27:23 +02:00
chan.c
wifi: cfg80211: allow IR in 20 MHz configurations
2025-05-29 11:02:23 +02:00
core.c
wifi: cfg80211: stop radar detection in cfg80211_leave()
2026-01-08 10:13:57 +01:00
core.h
wifi: cfg80211: stop radar detection in cfg80211_leave()
2026-01-08 10:13:57 +01:00
debugfs.c
wifi: cfg80211: add locked debugfs wrappers
2023-11-27 11:24:58 +01:00
debugfs.h
…
ethtool.c
…
ibss.c
wifi: cfg80211: move DFS related members to links[] in wireless_dev
2024-09-06 13:01:05 +02:00
Kconfig
wifi: cfg80211/mac80211: remove dependency on non-existing option
2024-01-18 14:50:01 +01:00
lib80211_crypt_ccmp.c
wifi: lib80211: Constify struct lib80211_crypto_ops
2024-08-27 10:28:51 +02:00
lib80211_crypt_tkip.c
wifi: lib80211: Constify struct lib80211_crypto_ops
2024-08-27 10:28:51 +02:00
lib80211_crypt_wep.c
wifi: lib80211: Constify struct lib80211_crypto_ops
2024-08-27 10:28:51 +02:00
lib80211.c
wifi: lib80211: Constify struct lib80211_crypto_ops
2024-08-27 10:28:51 +02:00
Makefile
kbuild: use $(src) instead of $(srctree)/$(src) for source directory
2024-05-10 04:34:52 +09:00
mesh.c
wifi: cfg80211: move DFS related members to links[] in wireless_dev
2024-09-06 13:01:05 +02:00
mlme.c
wifi: cfg80211: stop radar detection in cfg80211_leave()
2026-01-08 10:13:57 +01:00
nl80211.c
wifi: nl80211: Set num_sub_specs before looping through sub_specs
2025-08-15 12:13:46 +02:00
nl80211.h
wifi: nl80211: clean up coalescing rule handling
2024-05-29 10:38:53 +02:00
ocb.c
wifi: cfg80211: remove wdev mutex
2023-09-11 11:27:23 +02:00
of.c
…
pmsr.c
wifi: nl80211: remove the FTMs per burst limit for NDP ranging
2024-06-12 13:04:25 +02:00
radiotap.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
rdev-ops.h
wifi: cfg80211: handle DFS per link
2024-09-06 13:01:05 +02:00
reg.c
wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
2025-11-02 22:15:22 +09:00
reg.h
wifi: cfg80211: add return docs for regulatory functions
2024-04-19 10:29:08 +02:00
scan.c
wifi: cfg80211: fix use-after-free in cmp_bss()
2025-09-09 18:58:05 +02:00
sme.c
wifi: cfg80211: sme: store capped length in __cfg80211_connect_result()
2026-01-08 10:14:31 +01:00
sysfs.c
wifi: cfg80211: fully move wiphy work to unbound workqueue
2024-05-29 15:23:33 +02:00
sysfs.h
…
trace.c
…
trace.h
wifi: cfg80211: add an hrtimer based delayed work item
2025-11-24 10:36:05 +01:00
util.c
wifi: cfg80211: use cfg80211_leave() in iftype change
2026-01-08 10:13:57 +01:00
wext-compat.c
wifi: cfg80211: wext: convert return value to kernel-doc
2023-10-23 11:45:17 +02:00
wext-compat.h
…
wext-core.c
wifi: avoid kernel-infoleak from struct iw_point
2026-01-17 16:31:17 +01:00
wext-priv.c
wifi: avoid kernel-infoleak from struct iw_point
2026-01-17 16:31:17 +01:00
wext-proc.c
…
wext-sme.c
wifi: cfg80211: remove wdev mutex
2023-09-11 11:27:23 +02:00
wext-spy.c
…