Re: [PATCH] hwmon: (corsair-cpro) Validate the size of the received input buffer

From: Guenter Roeck
Date: Thu Jun 19 2025 - 12:51:30 EST


On Thu, Jun 19, 2025 at 03:27:47PM +0200, Marius Zachmann wrote:
> Add buffer_recv_size to store the size of the received bytes.
> Validate buffer_recv_size in send_usb_cmd().
>
> Reported-by: syzbot+3bbbade4e1a7ab45ca3b@xxxxxxxxxxxxxxxxxxxxxxxxx
> Closes: https://lore.kernel.org/linux-hwmon/61233ba1-e5ad-4d7a-ba31-3b5d0adcffcc@xxxxxxxxxxxx
> Fixes: 40c3a4454225 ("hwmon: add Corsair Commander Pro driver")
> Signed-off-by: Marius Zachmann <mail@xxxxxxxxxxxxxxxxx>

Applied.

Thanks,
Guenter