diff options
| author | Zhiling Zou <zhilinz@nebusec.ai> | 2026-08-29 18:07:23 +0800 |
|---|---|---|
| committer | Stefan Schmidt <stefan@datenfreihafen.org> | 2026-09-02 09:54:27 +0200 |
| commit | bf79662bc85e820ac3b846e2f347da29fbf6ac95 (patch) | |
| tree | 3e70caee9ddaa1d467aaf320439c4db89cfc3bab /include | |
| parent | ff5891b266a7fc6a062710836be84f1cc19338b5 (diff) | |
ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink
TUNSETLINK allows a TUN device to change its link-layer type to
ARPHRD_IEEE802154 without initializing ieee802154_ptr. lowpan_newlink()
checks only the device type before dereferencing the pointer, so an
RTM_NEWLINK request can trigger a NULL pointer dereference.
Reject devices without ieee802154_ptr along with devices of the wrong type.
Fixes: 51e0e5d8124e ("ieee802154: 6lowpan: remove multiple lowpan per wpan support")
Cc: stable@vger.kernel.org
Reported-by: Vega <vega@nebusec.ai>
Signed-off-by: Zhiling Zou <zhilinz@nebusec.ai>
Link: https://lore.kernel.org/0b715da69bd15a86ddc47dad5cf12da648211050.1787997209.git.zhilinz@nebusec.ai
Signed-off-by: Stefan Schmidt <stefan@datenfreihafen.org>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions