shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-05 10:31:46 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
2a4b092d91ac8a51f23845c6dae684a757571891
linux/drivers
History
Vitaliy Shevtsov c94e965f76 nvmet-auth: assign dh_key to NULL after kfree_sensitive 
[ Upstream commit d2f551b1f72b4c508ab9298419f6feadc3b5d791 ]

ctrl->dh_key might be used across multiple calls to nvmet_setup_dhgroup()
for the same controller. So it's better to nullify it after release on
error path in order to avoid double free later in nvmet_destroy_auth().

Found by Linux Verification Center (linuxtesting.org) with Svace.

Fixes: 7a277c37d3 ("nvmet-auth: Diffie-Hellman key exchange support")
Cc: stable@vger.kernel.org
Signed-off-by: Vitaliy Shevtsov <v.shevtsov@maxima.ru>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: Keith Busch <kbusch@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-11-08 16:26:46 +01:00
..
accessibility
speakup: Fix sizeof() vs ARRAY_SIZE() bug
2024-06-12 11:02:55 +02:00
acpi
ACPI: CPPC: Make rmw_lock a raw_spin_lock
2024-11-08 16:26:43 +01:00
amba
…
android
binder: fix UAF caused by offsets overwrite
2024-09-12 11:10:26 +02:00
ata
ata: libata: avoid superfluous disk spin down + spin up during hibernation
2024-10-17 15:22:26 +02:00
atm
atm: idt77252: prevent use after free in dequeue_rx()
2024-08-29 17:30:24 +02:00
auxdisplay
auxdisplay: ht16k33: Drop reference after LED registration
2024-08-03 08:49:51 +02:00
base
Revert "driver core: Fix uevent_show() vs driver detach race"
2024-11-08 16:26:44 +01:00
bcma
…
block
aoe: fix the potential use-after-free problem in more places
2024-10-17 15:21:58 +02:00
bluetooth
Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
2024-10-22 15:56:49 +02:00
bus
bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
2024-10-17 15:21:20 +02:00
cdrom
cdrom: rearrange last_media_change check to avoid unintentional overflow
2024-07-11 12:47:10 +02:00
char
virtio_console: fix misc probe bugs
2024-10-17 15:22:12 +02:00
clk
clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
2024-10-17 15:22:16 +02:00
clocksource
clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
2024-10-17 15:20:47 +02:00
comedi
comedi: ni_routing: tools: Check when the file could not be opened
2024-10-17 15:22:16 +02:00
connector
…
counter
counter: ti-eqep: enable clock at probe
2024-07-05 09:31:53 +02:00
cpufreq
cpufreq: Generalize of_perf_domain_get_sharing_cpumask phandle format
2024-11-08 16:26:39 +01:00
cpuidle
cpuidle: Avoid potential overflow in integer multiplication
2024-04-13 13:04:54 +02:00
crypto
powerpc/64: Add big-endian ELFv2 flavour to crypto VMX asm generation
2024-10-22 15:56:51 +02:00
cxl
cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
2024-11-08 16:26:46 +01:00
dax
device-dax: correct pgoff align in dax_set_mapping()
2024-10-17 15:22:27 +02:00
dca
…
devfreq
…
dio
…
dma
dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
2024-09-08 07:53:11 +02:00
dma-buf
dma-buf: heaps: Fix off-by-one in CMA heap fault handler
2024-09-18 19:23:06 +02:00
edac
EDAC/igen6: Fix conversion of system address to physical memory address
2024-10-17 15:21:23 +02:00
eisa
…
extcon
extcon: max8997: select IRQ_DOMAIN instead of depending on it
2024-06-12 11:03:41 +02:00
firewire
firewire: nosy: ensure user_length is taken into account when fetching packet contents
2024-05-17 11:56:16 +02:00
firmware
firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
2024-11-08 16:26:43 +01:00
fpga
fpga: region: add owner module and take its refcount
2024-06-12 11:03:39 +02:00
fsi
…
gnss
…
gpio
gpio: aspeed: Use devm_clk api to manage clock source
2024-10-17 15:22:21 +02:00
gpu
drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
2024-11-01 01:56:07 +01:00
greybus
greybus: Fix use-after-free bug in gb_interface_release due to race condition.
2024-06-21 14:36:00 +02:00
hid
hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
2024-10-17 15:22:26 +02:00
hsi
…
hte
…
hv
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
2024-09-12 11:10:26 +02:00
hwmon
hwmon: (adt7470) Add missing dependency on REGMAP_I2C
2024-10-17 15:22:24 +02:00
hwspinlock
hwspinlock: Introduce hwspin_lock_bust()
2024-09-08 07:53:09 +02:00
hwtracing
coresight: tmc: sg: Do not leak sg_table
2024-10-17 15:21:11 +02:00
i2c
i2c: i801: Use a different adapter-name for IDF adapters
2024-10-17 15:22:14 +02:00
i3c
i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
2024-09-12 11:10:24 +02:00
idle
…
iio
iio: light: veml6030: fix microlux value calculation
2024-11-08 16:26:45 +01:00
infiniband
RDMA/bnxt_re: synchronize the qp-handle table array
2024-11-08 16:26:40 +01:00
input
Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
2024-10-17 15:22:12 +02:00
interconnect
interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID
2024-08-03 08:49:19 +02:00
iommu
iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
2024-10-22 15:56:44 +02:00
ipack
…
irqchip
irqchip/renesas-rzg2l: Fix missing put_device
2024-11-01 01:56:00 +01:00
isdn
mISDN: Fix a use after free in hfcmulti_tx()
2024-08-03 08:49:50 +02:00
leds
leds: spi-byte: Call of_node_put() on error path
2024-09-12 11:10:19 +02:00
macintosh
macintosh/therm_windtunnel: fix module unload.
2024-08-03 08:49:22 +02:00
mailbox
mailbox: bcm2835: Fix timeout during suspend mode
2024-10-17 15:21:30 +02:00
mcb
…
md
Revert "dm: requeue IO if mapping table not yet available"
2024-10-17 15:21:12 +02:00
media
media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
2024-10-17 15:22:15 +02:00
memory
memory: stm32-fmc2-ebi: check regmap_read return value
2024-08-29 17:30:36 +02:00
memstick
…
message
…
mfd
mfd: omap-usb-tll: Use struct_size to allocate tll
2024-08-03 08:49:15 +02:00
misc
misc: sgi-gru: Don't disable preemption in GRU driver
2024-11-08 16:26:44 +01:00
mmc
mmc: cqhci: Fix checking of CQHCI_HALT state
2024-09-12 11:10:17 +02:00
most
…
mtd
mtd: rawnand: mtk: Fix init error path
2024-10-17 15:20:50 +02:00
mux
…
net
mctp i2c: handle NULL header address
2024-11-08 16:26:46 +01:00
nfc
nfc: pn533: Add poll mod list filling check
2024-09-04 13:25:02 +02:00
ntb
ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
2024-10-17 15:22:15 +02:00
nubus
…
nvdimm
virtio_pmem: Check device status before requesting flush
2024-10-17 15:22:16 +02:00
nvme
nvmet-auth: assign dh_key to NULL after kfree_sensitive
2024-11-08 16:26:46 +01:00
nvmem
nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
2024-09-12 11:10:26 +02:00
of
of/irq: Support #msi-cells=<0> in of_msi_get_domain
2024-10-17 15:21:55 +02:00
opp
OPP: ti: Fix ti_opp_supply_probe wrong return values
2024-08-03 08:48:58 +02:00
parisc
…
parport
parport: Proper fix for array out-of-bounds access
2024-10-22 15:56:49 +02:00
pci
PCI: Mark Creative Labs EMU20k2 INTx masking as broken
2024-10-17 15:22:14 +02:00
pcmcia
pcmcia: Use resource_size function on resource object
2024-09-12 11:10:20 +02:00
peci
…
perf
perf/arm-cmn: Fail DTC counter allocation correctly
2024-10-17 15:21:28 +02:00
phy
phy: zynqmp: Take the phy mutex in xlate
2024-09-12 11:10:22 +02:00
pinctrl
pinctrl: apple: check devm_kasprintf() returned value
2024-10-22 15:56:50 +02:00
platform
platform/x86: dell-wmi: Ignore suspend notifications
2024-11-01 01:56:07 +01:00
pnp
…
power
power: supply: hwmon: Fix missing temp1_max_alarm attribute
2024-10-17 15:21:51 +02:00
powercap
powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
2024-11-01 01:56:05 +01:00
pps
tty/serial: Make ->dcd_change()+uart_handle_dcd_change() status bool active
2024-11-01 01:56:02 +01:00
ps3
…
ptp
ptp: fix integer overflow in max_vclocks_store
2024-06-27 13:46:19 +02:00
pwm
pwm: atmel-tcb: Fix race condition and convert to guards
2024-08-03 08:48:55 +02:00
rapidio
…
ras
…
regulator
regulator: Return actual error in of_regulator_bulk_get_all()
2024-10-17 15:20:45 +02:00
remoteproc
remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
2024-10-17 15:22:15 +02:00
reset
reset: k210: fix OF node leak in probe() error path
2024-10-17 15:20:47 +02:00
rpmsg
…
rtc
rtc: at91sam9: fix OF node leak in probe() error path
2024-10-17 15:22:01 +02:00
s390
s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
2024-10-22 15:56:44 +02:00
sbus
…
scsi
scsi: scsi_transport_fc: Allow setting rport state to current state
2024-11-08 16:26:43 +01:00
sh
…
siox
…
slimbus
slimbus: qcom-ngd-ctrl: Add timeout for wait operation
2024-05-17 11:56:20 +02:00
soc
soc: versatile: realview: fix soc_dev leak during device remove
2024-10-17 15:21:24 +02:00
soundwire
soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
2024-09-18 19:23:06 +02:00
spi
spi: bcm63xx: Fix missing pm_runtime_disable()
2024-10-17 15:22:04 +02:00
spmi
spmi: hisi-spmi-controller: Do not override device identifier
2024-06-21 14:35:55 +02:00
ssb
ssb: Fix division by zero issue in ssb_calc_clock_rate
2024-08-29 17:30:27 +02:00
staging
staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
2024-11-08 16:26:45 +01:00
target
scsi: target: core: Fix null-ptr-deref in target_alloc_device()
2024-11-01 01:56:00 +01:00
tc
…
tee
tee: optee: ffa: Fix missing-field-initializers warning
2024-07-25 09:49:17 +02:00
thermal
thermal: intel: int340x: processor: Fix warning during module unload
2024-10-17 15:22:20 +02:00
thunderbolt
thunderbolt: Mark XDomain as unplugged when router is removed
2024-08-29 17:30:13 +02:00
tty
serial: protect uart_port_dtr_rts() in uart_shutdown() too
2024-11-01 01:56:07 +01:00
ufs
scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
2024-10-22 15:56:46 +02:00
uio
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
2024-09-12 11:10:26 +02:00
usb
xhci: Use pm_runtime_get to prevent RPM on unsupported systems
2024-11-08 16:26:44 +01:00
vdpa
vduse: Temporarily fail if control queue feature requested
2024-07-05 09:31:48 +02:00
vfio
vfio/pci: fix potential memory leak in vfio_intx_enable()
2024-10-17 15:21:15 +02:00
vhost
vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
2024-10-17 15:22:09 +02:00
video
fbdev: sisfb: Fix strbuf array overflow
2024-10-17 15:22:18 +02:00
virt
drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
2024-06-12 11:03:30 +02:00
virtio
vdpa: Add eventfd for the vdpa callback
2024-10-17 15:21:12 +02:00
vlynq
…
w1
…
watchdog
watchdog: imx_sc_wdt: Don't disable WDT in suspend
2024-10-17 15:21:06 +02:00
xen
xen/swiotlb: fix allocated size
2024-10-17 15:20:55 +02:00
zorro
…
Kconfig
…
Makefile
…