From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mta1.migadu.com (out-253.mta1.migadu.com [95.215.58.253]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D411B4A0EF8 for ; Mon, 12 Oct 2026 15:40:04 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=95.215.58.253 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1791819606; cv=none; b=mCYrFxMEi0RZzix5gR7LrhXgUesRZc3ZJwpce8gPrpipYWnu/XnjxmkxKv1gJrxM6KlpuYa+ltmALX7oW1+XXaZn9491kaZmXnvumgm0l52rYOYBd2MGI4AJbP/BvJleZXnO8Zsng82iQCvxWgdgWmQTChjSLBLdF0silFBL4xg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1791819606; c=relaxed/simple; bh=zPGOdscwfUn5mgzb0Gu30YtAw5dbLao3e/+fpf4jvD8=; h=MIME-Version:Date:Content-Type:From:Message-ID:Subject:To:Cc: In-Reply-To:References; b=ctrt6kFOdXnM9aHW8EbTW46vd/8uaKHsDVIi1O3qCbo57du4oUGrS5TALGQrT4osnUKtZzImB4M5vQqitdumCMO389UR4EWhwPABkr9wUy43UjwMp71EyVGnB8GFwYrjReSeZmc2HieI05YJUcBWtC53bfGbSYJzY9a5tnb43n8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.dev; spf=pass smtp.mailfrom=linux.dev; dkim=pass (1024-bit key) header.d=linux.dev header.i=@linux.dev header.b=iqcjYwO2; arc=none smtp.client-ip=95.215.58.253 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.dev Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=linux.dev Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linux.dev header.i=@linux.dev header.b="iqcjYwO2" X-Envelope-To: linux-kernel@vger.kernel.org DKIM-Signature: a=rsa-sha256; bh=zPGOdscwfUn5mgzb0Gu30YtAw5dbLao3e/+fpf4jvD8=; c=simple/simple; d=linux.dev; h=from:to:subject:date:message-id:mime-version:content-type; s=key1; t=1791819602; v=1; x=1792424402; b=iqcjYwO2LqFj4OZJ+hoO9/P5tFqoC6njYvBztokFZcdncyIoi0uVOp+CeeHxfgXFJB+LYLYO c3z3K46re8hN9scIxBUF0/kLIgYO9BmCG6DVWH8t2TTUG0cBv+egOaW3mb9tjHG8u3zHR+EycYh CmrYPlInjHPH0yTcks+dDrGQ= X-Envelope-To: linux-kernel@vger.kernel.org Received: by smtp.migadu.com with ESMTPS id 8cfabf6460186618; Mon, 12 Oct 2026 15:40:02 +0000 X-Mizu-Trace-ID: 8cfabf6460186618 X-Migadu-Flow: FLOW_OUT Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Date: Mon, 12 Oct 2026 15:40:01 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: "Luka Gejak" Message-ID: <341ceaef821fe23a887a90701d9fda6516066edf@linux.dev> TLS-Required: No Subject: Re: [PATCH 5.10] staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop To: "=?utf-8?B?0JzQuNGF0LDQuNC7INCU0LzQuNGC0YDQuNGH0LXQvdC60L4=?=" Cc: stable@vger.kernel.org, "Greg Kroah-Hartman" , "Sasha Levin" , "Fabio Aiuto" , "Alexandru Hossu" , "Hans de Goede" , "Navaneeth K" , "Michael Straube" , linux-staging@lists.linux.dev, linux-kernel@vger.kernel.org, "Dan Carpenter" , "Andrei Khomenkov" , "Dalvin-Ehinoma Noah Aiguobas" , "Michael Huang" , "Jinke Wu" , "Nikolay Kulikov" , "William Hansen-Baird" , "Serhat Kumral" , "Nazar Kletskii" , "Jennifer Guo" , "Hans de Goede" , lvc-project@linuxtesting.org, "stable" In-Reply-To: References: <20261012140642.1076-1-mdmitrichenko@astralinux.ru> <7e9af4f7528da1307cf62e53cf6b00fa9c4f674f@linux.dev> October 12, 2026 at 5:33 PM, "=D0=9C=D0=B8=D1=85=D0=B0=D0=B8=D0=BB =D0=94= =D0=BC=D0=B8=D1=82=D1=80=D0=B8=D1=87=D0=B5=D0=BD=D0=BA=D0=BE" wrote: >=20 >=20On Mon, 12 Oct 2026 at 17:19 MSK, Luka Gejak w= rote: >=20 >=20>=20 >=20> It seems to me that this was sent by accident by running git format= -patch -1 > >=20 >=20> You probably forgot to commit so git made last commit into a patch= file. > >=20 >=20> Either way staging rtl8723bs is getting removed in linux 7.4 so an= y > > further commits for rtl8723bs are discouraged. > >=20 >=20Hi Luka, >=20 >=20Thanks for taking a look. This was intentional: it is a backport of > your reviewed fix f9654207e922 for the 5.10.y stable tree (hence the > [PATCH 5.10] prefix). The upstream commit is tagged Cc: stable and is > already in 5.15.y and newer, but 5.10.y is still missing it > (CVE-2026-64444).=20 >=20 > As far as I understand, the removal in 7.4 affects mainline only; the > driver is still part of 5.10.y, so the fix is still relevant there. >=20 >=20Best regards, > Mikhail > Understandable, I wasn't aware it isn't backported as it seems to me it was merged quite some time ago. Best regards, Luka Gejak