linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-09-18 22:19:30 +02:00

Files

T

History

Zhiling Zou bf79662bc8 ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink

TUNSETLINK allows a TUN device to change its link-layer type to
ARPHRD_IEEE802154 without initializing ieee802154_ptr. lowpan_newlink()
checks only the device type before dereferencing the pointer, so an
RTM_NEWLINK request can trigger a NULL pointer dereference.

Reject devices without ieee802154_ptr along with devices of the wrong type.

Fixes: 51e0e5d812 ("ieee802154: 6lowpan: remove multiple lowpan per wpan support")
Cc: stable@vger.kernel.org
Reported-by: Vega <vega@nebusec.ai>
Signed-off-by: Zhiling Zou <zhilinz@nebusec.ai>
Link: https://lore.kernel.org/0b715da69bd15a86ddc47dad5cf12da648211050.1787997209.git.zhilinz@nebusec.ai
Signed-off-by: Stefan Schmidt <stefan@datenfreihafen.org>

2026-09-02 09:54:27 +02:00

6lowpan

ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink

2026-09-02 09:54:27 +02:00

core.c

ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()

2026-06-19 21:40:53 +02:00

core.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

header_ops.c

ieee802154: fix kernel-infoleak in dgram_recvmsg()