From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f54.google.com (mail-wm1-f54.google.com [209.85.128.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 514FB37BE7D for ; Mon, 27 Apr 2026 08:18:20 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.54 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777277901; cv=none; b=Z5XDUQEEV9728PNFl2Iv/aR+PYL6Z7msvg1IxeiMnd53NhgX3eP7fKEtfL45I0mHBJS+U/0nmMP/Xsoj8GF0Vf4gxD/x8M68RTfYPyK6WA0o6nc1/SumpelzVFGgGSBf9XQn6VPZsgyCezfp3kVwJEptEyyzV0UeOZ9c6S4X41Q= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1777277901; c=relaxed/simple; bh=4R9u7Yqha8XvhDEogDKrtEzhTaJQUjpTqf2xnzVTRKY=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=J148/5wJajNTaemQ85h41RgthF5K9uFfTWQSbink5zvV5RDKHoe9jWAaCCikivcZ6WjLZuJrIdeBsYzK13uzX5AVWeyDGNYbdE7pULcuSjqzg6acIePARG5WgVGIisvAt3J5oF/td61LWr1nkDXWR04/mYtKmv3LsP/UEpRj9FE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=iPiMntVh; arc=none smtp.client-ip=209.85.128.54 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="iPiMntVh" Received: by mail-wm1-f54.google.com with SMTP id 5b1f17b1804b1-4891c00e7aeso72978315e9.2 for ; Mon, 27 Apr 2026 01:18:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1777277899; x=1777882699; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=kKfpvUNjN/nhxwoh6IXPn5Jxa7FTn9ptppkv0558HJw=; b=iPiMntVhKMSDfg4yjf1bbkBjOLGkM7S5upV5lUk3+iIRL23DnBhsmCkFrqfyr85Sat V3jH4hX0jI6haZA8Neg4D6awi/gBYh7yg/9WclNnHvhm2GZx3R9I+pD4dKO84cfmfyTL oyQGS0hnRayidp4sNdGq/9jwY+tEZ/iqdLKVzm/ghri2InZpu33UFgtfJRhiHUT0POJg nziDNCGVQld5W4/LVGOCusY6PtnyfG3/6MI/L74rFHMQKf9Wj4vuY5Z9YxIRymjU8TFK rX1mOW1gdUgfHo0+/PB6MGcRCFqmB5mpprkvq9Dc2SrokTGtdzzNHxi2isoe5dXpizX8 GdFQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777277899; x=1777882699; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=kKfpvUNjN/nhxwoh6IXPn5Jxa7FTn9ptppkv0558HJw=; b=BRZDYOzTB6lRW3E0aqBwQD/tOwY1Cq9swThguBF8PMo6KKvkEDIyLyi/wN7osX6Nbg uFx1pSMSlZQ17t5cP6gS4l+HAkDT7UyYEEdaa9jEfnw9Kb9LYua0CES7CSutfgfYkh4e r0F2mO4Aqldy8GIdArk1bcpYZoo7FvHd5Rc4+Xkez9ujs+9t3ZEK5pHc4QBvDZMOY36t qlVyaD8v7i8qqPzPqMJSyRhOTxdDut9/5EpNeJwaUckGJ69iD78qY9kLtXv/swdTjHY3 edd29a8HYyyn5oHC0rXt0pWchgAXCgZWwB70OW/lraKLpcjEv62UkJccZiMedo9Z9XUN L7JQ== X-Forwarded-Encrypted: i=1; AFNElJ+k6ORWLjzqlp6M5AfCydWBS/jLLeIj0L2ngV6BsPGUYe6+V2cwXqg8N9YUoNWOW648HxeDHn9NyJ6Cv9M=@vger.kernel.org X-Gm-Message-State: AOJu0YwEAGeqaFLEQSXKKXF33W3yXJPxVAVOJrN5d5SiUzUnoda5DGoE 6hFMXnBojouM78zQlh4AhV4AjISAAzc+zHZTwkKuPshiN5sxPhSBFV/o X-Gm-Gg: AeBDieteTCGlouhHJCKHaYIO8Xyy0jYhSoJSTZIhJ9gVTQj/i+iANhvrb4BtM0RwRtZ QxQiYNlPt8FmDs6HS8fzObGwmvIRNfx2oDPgOLpOqLennIcVEb6izyv2A3NEfcGBmlANbTPfa+1 tw9T2wWHh1H3Mb3iPPX1M69rQdiGl/dBPcgbxdmHoMaNiWtsFYARfFDvM318Rwevqww9jn18Idd Z27FmEjVH0ol6FG732ONwDMU7LBRz13ip2w0k+tHdkcZW2mu8aK3jpT0XLKnLiWRpUY2OoJ1x3g 5cRlQCe/cc8ZTWOS5pA6w/rYSmzyiQL9mT5XqWhDW1HwPlJ/7z6GqYms5qBT5MdAk2HzoYYtP2B c5gVeNWOWYPZN/DkYAll+RLQB6VRjpn42VwYvKzVkoEP19Vn+VCE0GPJomE5Ewy+3zm16Pyu9bg O7v3NPGqm4N9xxAC6ryDtZP1DMQwWG/shJ72Dw4E29f5RLI2ne87d2A1F1c0TU68/8SXw/7oxDW X/gzPBKazU+vQLylrwU+NlSXLSicNaCUDpdNXbtLbCe+s506Bf5lKLDNAB6wziPmsLbhDg= X-Received: by 2002:a05:600c:450c:b0:487:55c:e0c1 with SMTP id 5b1f17b1804b1-488fb768816mr581529925e9.14.1777277898410; Mon, 27 Apr 2026 01:18:18 -0700 (PDT) Received: from ahossu.localdomain ([82.78.232.184]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-488fc14a61asm712652115e9.15.2026.04.27.01.18.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 27 Apr 2026 01:18:17 -0700 (PDT) From: Alexandru Hossu To: gregkh@linuxfoundation.org, linux-staging@lists.linux.dev, linux-kernel@vger.kernel.org Cc: error27@gmail.com, luka.gejak@linux.dev, Alexandru Hossu Subject: [PATCH v3 0/3] staging: rtl8723bs: fix OOB reads and heap overflow in IE parsing Date: Mon, 27 Apr 2026 10:16:23 +0200 Message-ID: <20260427081626.3393697-1-hossu.alexandru@gmail.com> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit v3, addressing Luka's review. No code changes. - Added Fixes: and Cc: stable@vger.kernel.org to all three patches - Moved Reviewed-by above Signed-off-by on all three patches Thanks for the review, Luka. Alexandru Hossu (3): staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 8 ++++++++ drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 6 +++++- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 8 ++++++++ 3 files changed, 21 insertions(+), 1 deletion(-) -- 2.53.0