Re: [PATCH v3] p54: validate firmware record lengths

[Heyang Tan]

Hi Christian,

Thank you very much for reviewing the v3 patch and for providing your
Acked-by and Tested-by tags. I sincerely appreciate your careful testing
and guidance throughout the revisions.

May I also ask for your technical opinion on the security classification
of this issue? The malformed firmware records could cause out-of-bounds
reads in the kernel firmware parser, but I understand that the practical
security impact may depend on how the firmware can be supplied or replaced.

In your opinion, would this issue be appropriate for consideration by the
Linux kernel CVE team after the fix is merged and included in a released
stable kernel, or would it be more appropriate to regard it as a regular
firmware-parser robustness fix?

I understand that CVE assignment is handled by the Linux kernel CVE team,
and I am not asking you to make that decision or take any action on my
behalf. I would simply be very grateful for your technical advice on
whether contacting cve@xxxxxxxxxx after the fix is released would be
reasonable.

Thank you again for your time, testing, and helpful review.

Best regards,
Heyang Tan
School of Software
Taiyuan University of Technology