[PATCH 00/10] net: prevent buffer overflows in UDP packets

Sascha Hauer
2026-04-02T06:37:22Z

Our UDP handlers all use a UDP packets length without checking if it
fits into the incoming ethernet frame. Create a net_eth_to_udp() helper
which does the bounds checking and use it throughout the code.

Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
---
Sascha Hauer (10):
net: add net_eth_to_udp() helper for validated UDP extraction
fs: tftp: use net_eth_to_udp() for packet parsing
net: dhcp: use net_eth_to_udp() for packet parsing
fs: nfs: use net_eth_to_udp() for packet parsing
net: dns: use net_eth_to_udp() for packet parsing
net: sntp: use net_eth_to_udp() for packet parsing
net: netconsole: use net_eth_to_udp() for packet parsing
net: fastboot: use net_eth_to_udp() for packet parsing
net: fastboot: stop using net_eth_to_udp_payload() for PACKET_SIZE
net: remove unused net_eth_to_udp{hdr,_payload,len}() helpers

fs/nfs.c | 11 +++++++----
fs/tftp.c | 9 +++++----
include/net.h | 21 +++++++--------------
net/dhcp.c | 16 +++++++++-------
net/dns.c | 9 ++++++---
net/fastboot.c | 25 ++++++++++++++++---------
net/net.c | 40 ++++++++++++++++++++++++++++++++++++++++
net/netconsole.c | 7 +++++--
net/sntp.c | 14 +++++++++-----
9 files changed, 104 insertions(+), 48 deletions(-)
---
base-commit: 0933e8f2ebf0d91dfcf177a4e4292b02921a53f1
change-id: 20260402-net-eth-do-udp-327f4e65ddd5

Best regards,
--
Sascha Hauer <s.hauer@pengutronix.de>