ACK: [SRU][L/K/J/F/B][PATCH 0/1] CVE-2023-1380

[Tim Gardner]

On 5/9/23 1:05 PM, Yuxuan Luo wrote:
> [Impact]
> A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in
> drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux
> Kernel. This issue could occur when assoc_info->req_len data is bigger than
> the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of
> service.
> 
> [Backport]
> It is a clean cherry pick for L/K/J/F.
> For Bionic, substitute `bphy_err()` with `brcmf_err()` since `bphy_err()` was
> yet to be introduced in the Bionic tree.
> 
> [Test]
> Compile and smoke tested via modprobe and rmmod the brmcfmac module.
> 
> [Potential Regression]
> Expecting low potential of regression as the fix only adds an additionaly layer
> of sanity check.
> 
> Jisoo Jang (1):
>    wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
> 
>   drivers/net/wireless/brcm80211/brcmfmac/cfg80211.c | 5 +++++
>   1 file changed, 5 insertions(+)
> 
Acked-by: Tim Gardner <tim.gardner at canonical.com>
-- 
-----------
Tim Gardner
Canonical, Inc