shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-04-15 10:00:40 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
0dfd5fbcae5d40e5e58bc7c34305498e965bf1ef
linux/drivers
History
Shuah Khan 28f467e0bd usbip: prevent vhci_hcd driver from leaking a socket pointer address 
commit 2f2d0088eb upstream.

When a client has a USB device attached over IP, the vhci_hcd driver is
locally leaking a socket pointer address via the

/sys/devices/platform/vhci_hcd/status file (world-readable) and in debug
output when "usbip --debug port" is run.

Fix it to not leak. The socket pointer address is not used at the moment
and it was made visible as a convenient way to find IP address from socket
pointer address by looking up /proc/net/{tcp,tcp6}.

As this opens a security hole, the fix replaces socket pointer address with
sockfd.

Reported-by: Secunia Research <vuln@secunia.com>
Signed-off-by: Shuah Khan <shuahkh@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-01-31 12:06:07 +01:00
..
accessibility
…
acpi
ACPI: APEI / ERST: Fix missing error handling in erst_reader()
2018-01-02 20:33:19 +01:00
amba
…
android
ANDROID: binder: fix proc->tsk check.
2017-08-30 10:19:26 +02:00
ata
libata: apply MAX_SEC_1024 to all LITEON EP1 series devices
2018-01-23 19:50:16 +01:00
atm
atm: horizon: Fix irq release error
2017-12-16 10:33:55 +01:00
auxdisplay
…
base
sysfs/cpu: Add vulnerability folder
2018-01-17 09:35:33 +01:00
bcma
bcma: use (get|put)_device when probing/removing device driver
2017-03-12 06:37:30 +01:00
block
rbd: set max_segments to USHRT_MAX
2018-01-17 09:35:30 +01:00
bluetooth
Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"
2017-12-25 14:22:15 +01:00
bus
sunxi-rsb: Include OF based modalias in device uevent
2018-01-10 09:27:09 +01:00
cdrom
…
char
hwrng: core - sleep interruptible in read
2018-01-17 09:35:28 +01:00
clk
clk: tegra: Fix cclk_lp divisor register
2017-12-20 10:04:59 +01:00
clocksource
clockevents/drivers/cs5535: Improve resilience to spurious interrupts
2017-10-27 10:23:17 +02:00
connector
connector: bump skb->users before callback invocation
2016-01-04 21:46:45 -05:00
cpufreq
cpufreq: CPPC: add ACPI_PROCESSOR dependency
2017-10-21 17:09:06 +02:00
cpuidle
cpuidle: fix broadcast control when broadcast can not be entered
2017-12-25 14:22:15 +01:00
crypto
crypto: n2 - cure use after free
2018-01-10 09:27:08 +01:00
dca
…
devfreq
…
dio
…
dma
dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type
2017-12-20 10:04:58 +01:00
dma-buf
dma-buf/fence: add fence_wait_any_timeout function v2
2015-10-30 01:16:16 -04:00
edac
EDAC, i5000, i5400: Fix definition of NRECMEMB register
2017-12-16 10:33:54 +01:00
eisa
…
extcon
extcon: palmas: Check the parent instance to prevent the NULL
2017-11-21 09:21:18 +01:00
firewire
firewire: net: fix fragmented datagram_size off-by-one
2016-11-10 16:36:35 +01:00
firmware
efi/esrt: Cleanup bad memory map log messages
2017-12-20 10:04:56 +01:00
fmc
…
fpga
fpga manager: Fix firmware resource leak on error
2015-11-24 15:25:46 -08:00
gpio
gpio: altera: Use handle_level_irq when configured as a level_high
2017-12-16 10:33:51 +01:00
gpu
drm/vmwgfx: Potential off by one in vmw_view_add()
2018-01-17 09:35:30 +01:00
hid
HID: xinmo: fix for out of range for THT 2P arcade controller.
2017-12-25 14:22:12 +01:00
hsi
hsi: controllers:remove redundant code
2015-10-30 16:10:40 +01:00
hv
x86/retpoline/hyperv: Convert assembler indirect jumps
2018-01-23 19:50:13 +01:00
hwmon
hwmon: (asus_atk0110) fix uninitialized data access
2017-12-25 14:22:12 +01:00
hwspinlock
drivers/hwspinlock: fix race between radix tree insertion and lookup
2016-02-25 12:01:23 -08:00
hwtracing
intel_th: pci: Add Gemini Lake support
2017-12-20 10:04:54 +01:00
i2c
i2c: riic: fix restart condition
2017-12-16 10:33:53 +01:00
ide
mm, page_alloc: rename __GFP_WAIT to __GFP_RECLAIM
2015-11-06 17:50:42 -08:00
idle
intel_idle: Support for Intel Xeon Phi Processor x200 Product Family
2016-09-15 08:27:46 +02:00
iio
iio: light: fix improper return value
2017-11-30 08:37:27 +00:00
infiniband
IB/srpt: Disable RDMA access by the initiator
2018-01-17 09:35:24 +01:00
input
Input: twl4030-vibra - fix sibling-node lookup
2018-01-23 19:50:16 +01:00
iommu
iommu/arm-smmu-v3: Don't free page table ops twice
2018-01-17 09:35:25 +01:00
ipack
…
irqchip
irqchip/crossbar: Fix incorrect type of register size
2017-12-16 10:33:52 +01:00
isdn
isdn: kcapi: avoid uninitialized data
2017-12-25 14:22:13 +01:00
leds
leds: ktd2692: avoid harmless maybe-uninitialized warning
2017-05-14 13:32:55 +02:00
lguest
…
lightnvm
lightnvm: put bio before return
2016-09-24 10:07:35 +02:00
macintosh
drivers/macintosh: adb: fix misleading Kconfig help text
2015-10-15 20:31:59 +11:00
mailbox
mailbox: handle empty message in tx_tick
2017-08-06 19:19:41 -07:00
mcb
mcb: Fixed bar number assignment for the gdd
2016-06-01 12:15:53 -07:00
md
dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6
2018-01-23 19:50:17 +01:00
media
usbvision fix overflow of interfaces array
2018-01-17 09:35:27 +01:00
memory
ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure
2017-12-16 10:33:51 +01:00
memstick
memstick: rtsx_usb_ms: Manage runtime PM when accessing the device
2016-10-28 03:01:35 -04:00
message
Merge tag '4.4-scsi-mkp' into misc
2015-11-12 07:06:18 -05:00
mfd
mfd: twl6040: Fix child-node lookup
2018-01-02 20:33:20 +01:00
misc
cxl: Check if vphb exists before iterating over AFU devices
2017-12-25 14:22:08 +01:00
mmc
mmc: mediatek: Fixed bug where clock frequency could be set wrong
2017-12-20 10:04:55 +01:00
mtd
mtd: nand: Fix writing mtdoops to nand flash.
2017-12-05 11:22:51 +01:00
net
can: peak: fix potential bug in packet fragmentation
2018-01-23 19:50:16 +01:00
nfc
nfc: fdp: fix NULL pointer dereference
2017-08-06 19:19:40 -07:00
ntb
ntb_transport: fix bug calculating num_qps_mw
2017-08-30 10:19:29 +02:00
nubus
…
nvdimm
libnvdimm, namespace: make 'resource' attribute only readable by root
2017-11-30 08:37:23 +00:00
nvme
nvme: Fix memory order on async queue deletion
2017-11-24 08:32:25 +01:00
nvmem
nvmem: imx-ocotp: Fix wrong register size
2017-08-06 19:19:46 -07:00
of
of: device: Export of_device_{get_modalias, uvent_modalias} to modules
2017-07-27 15:06:09 -07:00
oprofile
…
parisc
parisc: Hide Diva-built-in serial aux and graphics card
2018-01-02 20:33:20 +01:00
parport
parisc, parport_gsc: Fixes for printk continuation lines
2017-06-17 06:39:37 +02:00
pci
PCI / PM: Force devices to D0 in pci_pm_thaw_noirq()
2018-01-02 20:33:20 +01:00
pcmcia
pcmcia: db1xxx_ss: fix last irq_to_gpio user
2016-04-20 15:42:09 +09:00
perf
drivers/perf: arm_pmu: Fix leak in error path
2016-10-07 15:23:41 +02:00
phy
phy: work around 'phys' references to usb-nop-xceiv devices
2018-01-23 19:50:16 +01:00
pinctrl
pinctrl: st: add irq_request/release_resources callbacks
2017-12-25 14:22:11 +01:00
platform
platform/x86: hp-wmi: Do not shadow error values
2017-11-15 17:13:11 +01:00
pnp
PNP: Add Broadwell to Intel MCH size workaround
2016-08-16 09:30:48 +02:00
power
power: supply: bq24190_charger: Handle fault before status on interrupt
2017-05-14 13:32:54 +02:00
powercap
powercap / RAPL: fix BIOS lock check
2015-12-12 02:31:11 +01:00
pps
pps: do not crash when failed to register
2016-08-10 11:49:25 +02:00
ps3
…
ptp
…
pwm
pwm: pca9685: Fix period change with same duty cycle
2017-03-15 09:57:14 +08:00
rapidio
…
ras
…
regulator
regulator: fan53555: fix I2C device ids
2017-11-02 09:40:50 +01:00
remoteproc
remoteproc: Fix potential race condition in rproc_add
2016-08-20 18:09:20 +02:00
reset
…
rpmsg
…
rtc
rtc: set the alarm to the next expiring timer
2017-12-25 14:22:15 +01:00
s390
s390/qeth: no ETH header for outbound AF_IUCV
2017-12-25 14:22:12 +01:00
sbus
…
scsi
scsi: hpsa: fix volume offline state
2018-01-23 19:50:15 +01:00
sfi
…
sh
drivers: sh: Restore legacy clock domain on SuperH platforms
2016-03-09 15:34:49 -08:00
sn
…
soc
soc: qcom/spm: shut up uninitialized variable warning
2016-09-24 10:07:42 +02:00
spi
spi: xilinx: Detect stall with Unknown commands
2018-01-02 20:33:21 +01:00
spmi
spmi: Include OF based modalias in device uevent
2017-07-27 15:06:10 -07:00
ssb
ssb: Fix error routine when fallback SPROM fails
2017-01-09 08:07:42 +01:00
staging
staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl
2018-01-17 09:35:32 +01:00
target
target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK
2018-01-17 09:35:31 +01:00
tc
…
thermal
thermal: hisilicon: Handle return value of clk_prepare_enable
2017-12-25 14:22:15 +01:00
thunderbolt
thunderbolt: Fix double free of drom buffer
2016-06-01 12:15:53 -07:00
tty
sysrq: Fix warning in sysrq generated crash.
2018-01-17 09:35:28 +01:00
uio
uio: fix dmem_region_start computation
2016-10-31 04:13:59 -06:00
usb
usbip: prevent vhci_hcd driver from leaking a socket pointer address
2018-01-31 12:06:07 +01:00
uwb
uwb: ensure that endpoint is interrupt
2017-10-12 11:27:35 +02:00
vfio
vfio-pci: Handle error from pci_iomap
2017-08-06 19:19:46 -07:00
vhost
fix a page leak in vhost_scsi_iov_to_sgl() error recovery
2017-11-30 08:37:22 +00:00
video
backlight: pwm_bl: Fix overflow condition
2017-12-25 14:22:13 +01:00
virt
…
virtio
virtio: release virtio index when fail to device_register
2017-12-16 10:33:48 +01:00
vlynq
…
vme
vme: Fix wrong pointer utilization in ca91cx42_slave_get
2017-01-19 20:17:21 +01:00
w1
w1: ds2490: USB transfer buffers need to be DMAable
2017-03-12 06:37:29 +01:00
watchdog
watchdog: kempld: fix gcc-4.3 build
2017-10-21 17:09:04 +02:00
xen
xen: xenbus driver must not accept invalid transaction ids
2017-11-30 08:37:28 +00:00
zorro
…
Kconfig
Merge tag 'char-misc-4.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2015-11-04 22:15:15 -08:00
Makefile
usb: Make sure usb/phy/of gets built-in
2017-05-20 14:26:59 +02:00