[Midnightbsd-cvs] [MidnightBSD/src] fb1813: A programming error in the ure(4) device driver ca...

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: fb181330248da6cd1525ef3fe2b057ecdb4ba34b
      https://github.com/MidnightBSD/src/commit/fb181330248da6cd1525ef3fe2b057ecdb4ba34b
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2020-09-15 (Tue, 15 Sep 2020)

  Changed paths:
    M sys/dev/usb/net/if_ure.c

  Log Message:
  -----------
  A programming error in the ure(4) device driver caused some Realtek USB
Ethernet interfaces to incorrectly report packets with more than 2048 bytes
in a single USB transfer as having a length of only 2048 bytes.

An adversary can exploit this to cause the driver to misinterpret part of the
payload of a large packet as a separate packet, and thereby inject packets
across security boundaries such as VLANs.