SymbX/ModemManager
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ee761d009dda7f817954f74ddedcd59b729a9598
ModemManager/src
T
History
Dan Williams ee761d009d CVE-2026-95622: cbm: don't assert handling unsupported encodings (8-bit and reserved) 
A cell broadcast message using unsupported encodings would trigger an
assert in ModemManager and kill the process. A compromised base station
or modem firmware could craft or pass through these messages.

Reported by Yehia Ezzat and Keith Linneman

Impact: Moderate
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (6.5 Medium)
CWE-617 (Reachable Assertion)

Signed-off-by: Dan Williams <dan@ioncontrol.co>
2026-10-04 08:52:02 -05:00
..
kerneldevice
treewide: Fix typos
2025-03-11 23:15:57 +01:00
plugins
Disable PCO on older Sierra modem MC7304
2026-09-08 11:59:35 -05:00
tests
CVE-2026-95622: cbm: don't assert handling unsupported encodings (8-bit and reserved)
2026-10-04 08:52:02 -05:00
80-mm-candidate.rules
udev: always ignore the Qualcomm recovery layout (05c6:9008)
2023-10-11 12:52:00 +00:00
main.c
iface-modem: disable unsolicited 3GPP events during quick suspend/resume
2025-06-16 08:34:57 -05:00
meson.build
location-cache: add class to store cached location
2026-01-10 02:04:10 +03:00
mm-auth-provider.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-auth-provider.h
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-base-bearer.c
base-bearer: set dbus disconnect_request on ignored disconnection
2025-05-16 22:06:24 +09:00
mm-base-bearer.h
suspend: add suspend/resume support with powerd on ChromeOS
2022-06-09 08:32:13 +00:00
mm-base-call.c
voice: validate outgoing and deflect call numbers
2026-07-10 13:43:48 +02:00
mm-base-call.h
base-call: handle multiple DTMF characters
2025-05-30 08:02:48 -05:00
mm-base-cbm.c
base-cbm: Export the lang property on DBus
2025-05-23 14:15:14 -05:00
mm-base-cbm.h
base-cbm,cbm-list,iface-cbm: remove usage of MMBaseModem
2025-05-08 20:08:06 -05:00
mm-base-manager.c
base-manager: increase suspend timeout for each active bearer
2025-07-21 15:12:01 -05:00
mm-base-manager.h
iface-modem: disable unsolicited 3GPP events during quick suspend/resume
2025-06-16 08:34:57 -05:00
mm-base-modem-at.c
base-modem: support non-serial ports when peeking the best AT port
2024-04-23 07:25:12 +00:00
mm-base-modem-at.h
treewide: Fix typos
2025-03-11 23:15:57 +01:00
mm-base-modem.c
base-modem: make max timeouts configurable via udev rule
2026-09-20 15:46:50 -05:00
mm-base-modem.h
iface-modem: disable unsolicited 3GPP events during quick suspend/resume
2025-06-16 08:34:57 -05:00
mm-base-sim.c
sim: validate preferred networks operator codes
2026-07-10 13:43:48 +02:00
mm-base-sim.h
Move log parent and connection property binding to helper
2025-05-08 20:08:06 -05:00
mm-base-sms.c
base-sms: remove MODEM property
2025-05-08 20:24:38 -05:00
mm-base-sms.h
base-sms: remove MODEM property
2025-05-08 20:24:38 -05:00
mm-bearer-list.c
mtk: multiplex support only available in FM350 >= 29.23.06
2024-02-15 21:01:53 +00:00
mm-bearer-list.h
bearer-list: new common method to disconnect one or all bearers
2023-05-03 12:38:43 +00:00
mm-bearer-mbim.c
bearer-mbim: avoid deadlock when cancelling async SLAAC logic
2026-09-20 15:49:48 -05:00
mm-bearer-mbim.h
bearer-mbim: support async IP configuration indications reporting SLAAC result
2024-02-15 21:01:52 +00:00
mm-bearer-qmi.c
broadband-modem,iface-modem: move bearer counting to interface and generalize
2025-07-21 15:11:16 -05:00
mm-bearer-qmi.h
core: add autoptr cleanup methods to all internal types
2020-09-19 20:27:10 +02:00
mm-bind.c
Move log parent and connection property binding to helper
2025-05-08 20:08:06 -05:00
mm-bind.h
Move log parent and connection property binding to helper
2025-05-08 20:08:06 -05:00
mm-broadband-bearer.c
Move log parent and connection property binding to helper
2025-05-08 20:08:06 -05:00
mm-broadband-bearer.h
broadband-bearer: remove unused cid_selection_3gpp() method
2022-03-08 21:16:06 +01:00
mm-broadband-modem-mbim.c
broadband-modem-mbim: initialize autofreed string to NULL
2026-08-30 09:49:13 -05:00
mm-broadband-modem-mbim.h
broadband-modem-mbim: update all home/partner/non-partner LTE attach settings
2024-09-11 11:01:18 +00:00
mm-broadband-modem-qmi.c
broadband-modem-qmi: handle new QMI_VOICE_CALL_STATE_PRE_ALERTING
2026-10-04 08:47:30 -05:00
mm-broadband-modem-qmi.h
api,modem: new 'Physdev' property
2023-09-18 10:53:12 +02:00
mm-broadband-modem.c
modem-helpers: fix multiple C*REG events in single URC
2026-09-08 18:51:58 +02:00
mm-broadband-modem.h
broadband-modem,iface-modem: move bearer counting to interface and generalize
2025-07-21 15:11:16 -05:00
mm-call-at.c
base-call: handle multiple DTMF characters
2025-05-30 08:02:48 -05:00
mm-call-at.h
call: allow setting DTMF tone duration at call creation time
2025-05-30 07:59:58 -05:00
mm-call-list.c
call-list: remove unused modem property
2025-05-30 07:57:50 -05:00
mm-call-list.h
call-list: remove unused modem property
2025-05-30 07:57:50 -05:00
mm-call-qmi.c
base-call: handle multiple DTMF characters
2025-05-30 08:02:48 -05:00
mm-call-qmi.h
call: allow setting DTMF tone duration at call creation time
2025-05-30 07:59:58 -05:00
mm-cbm-list.c
base-cbm,cbm-list,iface-cbm: remove usage of MMBaseModem
2025-05-08 20:08:06 -05:00
mm-cbm-list.h
base-cbm,cbm-list,iface-cbm: remove usage of MMBaseModem
2025-05-08 20:08:06 -05:00
mm-cbm-part.c
CVE-2026-95622: cbm: don't assert handling unsupported encodings (8-bit and reserved)
2026-10-04 08:52:02 -05:00
mm-cbm-part.h
cbm-part: Handle additional coding schemes and parse languages
2025-05-23 14:15:14 -05:00
mm-charsets.c
charsets: fix read of uninitialized memory in gsm unpacked conversion
2023-05-18 21:00:45 +00:00
mm-charsets.h
charsets: move mm_sms_part_3gpp_util_split_text to mm_charset_util_split_text
2022-09-13 20:49:01 +00:00
mm-context.c
base-manager: new '--test-low-power-suspend-resume' option
2023-12-12 11:22:30 +00:00
mm-context.h
base-manager: new '--test-low-power-suspend-resume' option
2023-12-12 11:22:30 +00:00
mm-device.c
Move log parent and connection property binding to helper
2025-05-08 20:08:06 -05:00
mm-device.h
base-manager,sleep-monitor: wait for modem operations before sleeping
2025-05-07 22:59:51 -05:00
mm-dispatcher-connection.c
dispatcher-connection: add new 'disconnect-request' event
2025-05-16 22:06:10 +09:00
mm-dispatcher-connection.h
dispatcher-connection: add new 'disconnect-request' event
2025-05-16 22:06:10 +09:00
mm-dispatcher-fcc-unlock.c
dispatcher-fcc-unlock: remove unused variable
2022-08-17 16:23:33 +00:00
mm-dispatcher-fcc-unlock.h
dispatcher-fcc-unlock: inherit from the base dispatcher object
2022-04-05 08:14:53 +00:00
mm-dispatcher-modem-setup.c
dispatcher-modem-setup: new modem setup dispatcher
2024-04-16 12:14:45 +02:00
mm-dispatcher-modem-setup.h
dispatcher-modem-setup: new modem setup dispatcher
2024-04-16 12:14:45 +02:00
mm-dispatcher.c
dispatcher: new generic object to handle script dispatchers
2022-04-05 08:14:53 +00:00
mm-dispatcher.h
dispatcher: new generic object to handle script dispatchers
2022-04-05 08:14:53 +00:00
mm-error-helpers.c
mm-port-serial: add new MM_SERIAL_ERROR_SEND_TIMEOUT
2025-06-02 08:43:45 -05:00
mm-error-helpers.h
core: ensure all errors returned in DBus operations are normalized
2023-10-27 11:34:26 +02:00
mm-filter.c
core: use more inclusive words in logs
2023-10-06 08:57:32 +00:00
mm-filter.h
filter: add vendor id/subsystem vendor id filter
2022-05-24 09:22:06 +02:00
mm-iface-modem-3gpp-profile-manager.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-modem-3gpp-profile-manager.h
iface-modem-3gpp-profile-manager: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:27:04 +00:00
mm-iface-modem-3gpp-ussd.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-modem-3gpp-ussd.h
iface-modem-3gpp-ussd: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:27:04 +00:00
mm-iface-modem-3gpp.c
ifaces: fix UAFs in signal handlers when hot-unplugging
2026-07-10 15:00:07 +02:00
mm-iface-modem-3gpp.h
iface-modem: disable unsolicited 3GPP events during quick suspend/resume
2025-06-16 08:34:57 -05:00
mm-iface-modem-cdma.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-modem-cdma.h
iface-modem-cdma: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:45:39 +00:00
mm-iface-modem-cell-broadcast.c
ifaces: fix UAFs in signal handlers when hot-unplugging
2026-07-10 15:00:07 +02:00
mm-iface-modem-cell-broadcast.h
base-cbm,cbm-list,iface-cbm: remove usage of MMBaseModem
2025-05-08 20:08:06 -05:00
mm-iface-modem-firmware.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-modem-firmware.h
iface-modem-firmware: common logic to check for sahara/firehose tags
2025-02-21 14:08:50 +00:00
mm-iface-modem-location.c
iface-modem-location: Fix typo in error message
2025-11-05 23:29:36 +03:00
mm-iface-modem-location.h
iface-modem-location: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:45:38 +00:00
mm-iface-modem-messaging.c
ifaces: fix UAFs in signal handlers when hot-unplugging
2026-07-10 15:00:07 +02:00
mm-iface-modem-messaging.h
base-sms,sms-list: use signals to set multipart reference
2025-05-08 20:24:38 -05:00
mm-iface-modem-oma.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-modem-oma.h
iface-modem-oma: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:45:39 +00:00
mm-iface-modem-sar.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-modem-sar.h
iface-modem-sar: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:45:38 +00:00
mm-iface-modem-signal.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-modem-signal.h
iface-modem-signal: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:45:38 +00:00
mm-iface-modem-simple.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-modem-simple.h
iface-modem-simple: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:45:38 +00:00
mm-iface-modem-time.c
time: fix GSource leak and UAF in timezone poll
2026-07-10 15:00:07 +02:00
mm-iface-modem-time.h
iface-modem-time: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:45:38 +00:00
mm-iface-modem-voice.c
ifaces: fix UAFs in signal handlers when hot-unplugging
2026-07-10 15:00:07 +02:00
mm-iface-modem-voice.h
call: allow setting DTMF tone duration at call creation time
2025-05-30 07:59:58 -05:00
mm-iface-modem.c
base-manager: fix cleanup of multiplexed bearers
2025-10-03 10:51:59 +02:00
mm-iface-modem.h
broadband-modem,iface-modem: move bearer counting to interface and generalize
2025-07-21 15:11:16 -05:00
mm-iface-op-lock.c
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-op-lock.h
auth-provider: move auth provider logic into each class
2025-05-08 20:08:06 -05:00
mm-iface-port-at.c
iface-port-at: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:27:04 +00:00
mm-iface-port-at.h
iface-port-at: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:27:04 +00:00
mm-location-cache.c
location-cache: add class to store cached location
2026-01-10 02:04:10 +03:00
mm-location-cache.h
location-cache: add class to store cached location
2026-01-10 02:04:10 +03:00
mm-log-helpers.c
log-helpers: add helper to log simple connect properties
2022-11-04 13:12:56 +00:00
mm-log-helpers.h
log-helpers: add helper to log simple connect properties
2022-11-04 13:12:56 +00:00
mm-log-object.c
log-object: don't construct log ID with NULL self_id
2025-05-23 18:46:32 -05:00
mm-log-object.h
log-object: Add possibility to reset logger id
2025-05-23 18:46:32 -05:00
mm-log-test.h
test: fix _mm_log() prototypes
2023-04-10 09:21:46 +00:00
mm-log.c
libmm-glib,common: add helpers to build printable strings
2022-11-04 13:12:56 +00:00
mm-log.h
log: avoid redefining MM_MODULE_NAME
2023-01-03 13:56:25 +00:00
mm-modem-helpers-mbim.c
broadband-modem-mbim: consistently handle custom data classes
2025-04-01 10:25:43 -05:00
mm-modem-helpers-mbim.h
broadband-modem-mbim: consistently handle custom data classes
2025-04-01 10:25:43 -05:00
mm-modem-helpers-qmi.c
modem-helpers-qmi: add missing QMI_WDS_PDP_TYPE_NON_IP check
2026-04-15 12:46:28 +00:00
mm-modem-helpers-qmi.h
broadband-modem-qmi: Add initial interface bits
2025-04-13 05:01:32 +00:00
mm-modem-helpers.c
modem-helpers: fix multiple C*REG events in single URC
2026-09-08 18:51:58 +02:00
mm-modem-helpers.h
modem-helpers: fix multiple C*REG events in single URC
2026-09-08 18:51:58 +02:00
mm-netlink.c
netlink: add RTM_GETLINK support to read MAC address
2025-02-18 21:06:19 +00:00
mm-netlink.h
netlink: add RTM_GETLINK support to read MAC address
2025-02-18 21:06:19 +00:00
mm-plugin-manager.c
plugin-manager: disallow port additions to an already cancelled device context
2024-10-17 10:50:19 +00:00
mm-plugin-manager.h
base-manager: reprobe device on late port additions
2024-03-12 10:15:59 +00:00
mm-plugin.c
Fix generic driver not attaching to virtual ports
2025-10-20 15:16:32 -05:00
mm-plugin.h
base-modem: add subsystem device ID property
2025-02-21 10:39:29 +05:30
mm-port-mbim.c
api,modem: new 'IgnoredPorts' property
2025-04-25 09:37:16 +02:00
mm-port-mbim.h
port-mbim: preload supported services and allow querying
2024-04-23 07:25:12 +00:00
mm-port-net.c
api,modem: new 'IgnoredPorts' property
2025-04-25 09:37:16 +02:00
mm-port-net.h
netlink: add RTM_GETLINK support to read MAC address
2025-02-18 21:06:19 +00:00
mm-port-probe-at.c
mm-port-probe-at: also check for MM_SERIAL_ERROR_SEND_TIMEOUT
2025-06-02 08:43:45 -05:00
mm-port-probe-at.h
…
mm-port-probe.c
serial-parsers,port-serial-at: move echo removal into serial parser
2025-05-22 08:05:58 -05:00
mm-port-probe.h
api,modem: new 'IgnoredPorts' property
2025-04-25 09:37:16 +02:00
mm-port-qmi.c
port-qmi: add missing QMI_DATA_ENDPOINT_TYPE_ETHERNET
2026-04-15 12:54:09 +00:00
mm-port-qmi.h
port-qmi: use a single method to set all initial net port details
2024-01-25 13:45:14 +00:00
mm-port-scheduler-rr.c
port-scheduler: implement LOG_OBJECT interface and add scheduler logging
2025-05-23 18:46:53 -05:00
mm-port-scheduler-rr.h
port-serial: add serial port command scheduler
2025-05-23 18:46:53 -05:00
mm-port-scheduler.c
port-serial: add serial port command scheduler
2025-05-23 18:46:53 -05:00
mm-port-scheduler.h
port-serial: add serial port command scheduler
2025-05-23 18:46:53 -05:00
mm-port-serial-at.c
port-serial-at: fix crash if URC handler is cleared mid-dispatch
2026-07-10 15:00:07 +02:00
mm-port-serial-at.h
serial-parsers,port-serial-at: move echo removal into serial parser
2025-05-22 08:05:58 -05:00
mm-port-serial-gps.c
api,modem: new 'IgnoredPorts' property
2025-04-25 09:37:16 +02:00
mm-port-serial-gps.h
core: add autoptr cleanup methods to all internal types
2020-09-19 20:27:10 +02:00
mm-port-serial-qcdm.c
api,modem: new 'IgnoredPorts' property
2025-04-25 09:37:16 +02:00
mm-port-serial-qcdm.h
port-serial-qcdm: allow specifying input subsystem
2020-11-09 18:41:57 +01:00
mm-port-serial.c
port-serial: add flush operation
2025-06-14 16:02:23 -05:00
mm-port-serial.h
port-serial: add flush operation
2025-06-14 16:02:23 -05:00
mm-port.c
log-object: don't construct log ID with NULL self_id
2025-05-23 18:46:32 -05:00
mm-port.h
api,modem: new 'IgnoredPorts' property
2025-04-25 09:37:16 +02:00
mm-private-boxed-types.c
core: drop "volatile" for g_once_init_enter locations
2021-05-18 11:28:18 +02:00
mm-private-boxed-types.h
api,modem: new 'SimSlots' and 'PrimarySimSlot' properties
2020-08-28 14:59:06 +00:00
mm-qrtr-bus-watcher.c
qrtr-bus-watcher: Increase delay for probing
2024-09-18 20:53:37 +05:30
mm-qrtr-bus-watcher.h
qrtr-bus-watcher: add a class to watch for QRTR nodes
2021-04-14 11:27:27 +02:00
mm-serial-parsers.c
serial-parsers: don't echo-remove strange call start/end URCs
2025-05-22 08:05:58 -05:00
mm-serial-parsers.h
serial-parsers,port-serial-at: move echo removal into serial parser
2025-05-22 08:05:58 -05:00
mm-shared-qmi.c
qmi-shared: fix crash when passing a wrong log object
2026-08-30 10:13:59 -05:00
mm-shared-qmi.h
iface-modem-location: use G_DECLARE|DEFINE_INTERFACE() macros
2024-05-06 13:45:38 +00:00
mm-shared.h
plugins: setup new helper macros to define shared utils
2023-01-03 13:56:25 +00:00
mm-sim-mbim.c
sim-mbim: fix preload_cancellable bug that causes a crash
2025-10-15 18:24:19 +00:00
mm-sim-mbim.h
broadband-modem-mbim: update sim-type and esim-status of inactive slot
2022-03-22 21:53:08 +00:00
mm-sim-qmi.c
Move log parent and connection property binding to helper
2025-05-08 20:08:06 -05:00
mm-sim-qmi.h
mm-shared-qmi: load EID during SIM slot loading
2020-10-19 20:38:43 +00:00
mm-sleep-context.c
sleep-context: add ability to increase timeout
2025-07-21 15:11:16 -05:00
mm-sleep-context.h
sleep-context: add ability to increase timeout
2025-07-21 15:11:16 -05:00
mm-sleep-monitor-powerd.c
base-manager,sleep-monitor: wait for modem operations before sleeping
2025-05-07 22:59:51 -05:00
mm-sleep-monitor-systemd.c
base-manager,sleep-monitor: wait for modem operations before sleeping
2025-05-07 22:59:51 -05:00
mm-sleep-monitor.h
suspend: imported suspend/resume support from NetworkManager
2015-02-07 12:57:48 +01:00
mm-sms-at.c
base-sms: remove MODEM property
2025-05-08 20:24:38 -05:00
mm-sms-at.h
base-sms: pass SMS default storage at creation time and update as needed
2025-05-08 20:24:37 -05:00
mm-sms-list.c
broadband-modem: Fix receiving multipart SMS from own number
2026-08-31 08:30:13 +02:00
mm-sms-list.h
sms-list: remove usage of MMBaseModem
2025-05-08 20:24:38 -05:00
mm-sms-mbim.c
base-sms: remove MODEM property
2025-05-08 20:24:38 -05:00
mm-sms-mbim.h
base-sms: remove MODEM property
2025-05-08 20:24:38 -05:00
mm-sms-part-3gpp.c
sms: sanitize decoded alphanumeric SMS addresses
2026-07-10 13:43:48 +02:00
mm-sms-part-3gpp.h
sms: Make sms_decode_text public
2024-12-01 21:41:10 +00:00
mm-sms-part-cdma.c
sms-part-cdma: fix invalid reads due to wrong byte counts in read_bits
2023-03-30 22:51:48 +00:00
mm-sms-part-cdma.h
sms-part-cdma: port to use object logging
2020-04-08 16:35:09 +02:00
mm-sms-part.c
sms-part-cdma: merge WDP multipart CDMA WAP messages.
2021-11-21 21:17:20 +00:00
mm-sms-part.h
sms-part-cdma: merge WDP multipart CDMA WAP messages.
2021-11-21 21:17:20 +00:00
mm-sms-qmi.c
base-sms: remove MODEM property
2025-05-08 20:24:38 -05:00
mm-sms-qmi.h
base-sms: remove MODEM property
2025-05-08 20:24:38 -05:00
mm-test-utils.h
tests: test call DTMF functionality
2025-05-30 08:06:11 -05:00
mm-utils.h
utils: remove custom g_ptr_array_find_with_equal_func()
2021-07-09 12:15:32 +00:00