shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-03-25 03:50:24 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
49fca83f6f3f0cafe5bf5b43e8ee81cf73c2d5e0
linux/drivers
History
Dan Carpenter 49fca83f6f driver: soc: xilinx: use _safe loop iterator to avoid a use after free 
[ Upstream commit c58da0ba3e ]

The hash_for_each_possible() loop dereferences "eve_data" to get the
next item on the list.  However the loop frees eve_data so it leads to
a use after free.  Use hash_for_each_possible_safe() instead.

Fixes: c7fdb2404f ("drivers: soc: xilinx: add xilinx event management driver")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/761e0e4a-4caf-4a71-8f47-1c6ad908a848@kili.mountain
Signed-off-by: Michal Simek <michal.simek@amd.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-07-19 16:21:17 +02:00
..
accessibility
tty: fix possible null-ptr-defer in spk_ttyio_release
2023-01-24 07:24:37 +01:00
acpi
ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
2023-06-28 11:12:22 +02:00
amba
…
android
binder: fix UAF of alloc->vma in race with munmap()
2023-05-30 14:03:19 +01:00
ata
ata: libata-scsi: Avoid deadlock on rescan after device resume
2023-06-28 11:12:17 +02:00
atm
atm: idt77252: fix kmemleak when rmmod idt77252
2023-03-30 12:49:09 +02:00
auxdisplay
auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()
2023-03-11 13:55:16 +01:00
base
PM: domains: Move the verification of in-params from genpd_add_device()
2023-07-19 16:21:01 +02:00
bcma
…
block
null_blk: Fix: memory release when memory_backed=1
2023-06-28 11:12:39 +02:00
bluetooth
Bluetooth: hci_qca: fix debugfs registration
2023-06-14 11:15:28 +02:00
bus
bus: mhi: host: Range check CHDBOFF and ERDBOFF
2023-05-11 23:03:05 +09:00
cdrom
…
char
tpm_crb: Add support for CRB devices based on Pluton
2023-06-28 11:12:17 +02:00
clk
clk: rs9: Fix .driver_data content in i2c_device_id
2023-07-19 16:21:17 +02:00
clocksource
clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
2023-07-19 16:20:59 +02:00
comedi
comedi: adv_pci1760: Fix PWM instruction handling
2023-01-24 07:24:35 +01:00
connector
…
counter
counter: 104-quad-8: Fix Synapse action reported for Index signals
2023-04-13 16:55:31 +02:00
cpufreq
cpufreq: intel_pstate: Fix energy_performance_preference for passive
2023-07-19 16:21:01 +02:00
cpuidle
RISC-V: Align SBI probe implementation with spec
2023-05-11 23:03:04 +09:00
crypto
crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
2023-05-17 11:53:40 +02:00
cxl
cxl: Wait Memory_Info_Valid before access memory related info
2023-05-30 14:03:32 +01:00
dax
dax/kmem: Fix leak of memory-hotplug resources
2023-03-10 09:34:25 +01:00
dca
…
devfreq
PM/devfreq: governor: Add a private governor_data for governor
2023-01-07 11:11:40 +01:00
dio
drivers: dio: fix possible memory leak in dio_init()
2022-12-31 13:32:38 +01:00
dma
dmaengine: pl330: rename _start to prevent build error
2023-06-09 10:34:00 +02:00
dma-buf
dma-buf: actually set signaling bit for private stub fences
2023-02-09 11:28:23 +01:00
edac
EDAC/qcom: Get rid of hardcoded register offsets
2023-06-21 16:00:51 +02:00
eisa
…
extcon
extcon: usbc-tusb320: Update state on probe even if no IRQ pending
2022-12-31 13:32:39 +01:00
firewire
firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
2023-02-09 11:27:59 +01:00
firmware
firmware: arm_ffa: Set handle field to zero in memory descriptor
2023-06-14 11:15:31 +02:00
fpga
fpga: bridge: fix kernel-doc parameter description
2023-05-11 23:03:27 +09:00
fsi
use less confusing names for iov_iter direction initializers
2023-02-09 11:28:04 +01:00
gnss
…
gpio
gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain()
2023-06-28 11:12:35 +02:00
gpu
drm/panel: sharp-ls043t1le01: adjust mode settings
2023-07-19 16:21:17 +02:00
greybus
…
hid
HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
2023-07-01 13:16:26 +02:00
hsi
HSI: omap_ssi_core: Fix error handling in ssi_init()
2022-12-31 13:32:45 +01:00
hte
hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
2023-05-11 23:03:38 +09:00
hv
Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
2023-06-28 11:12:23 +02:00
hwmon
hwmon: (k10temp) Add PCI ID for family 19, model 78h
2023-06-09 10:34:08 +02:00
hwspinlock
…
hwtracing
coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
2023-05-30 14:03:22 +01:00
i2c
i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle
2023-06-28 11:12:40 +02:00
i3c
…
idle
Revert "cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*"
2023-04-06 12:10:58 +02:00
iio
iio: dac: build ad5758 driver when AD5758 is selected
2023-06-09 10:34:19 +02:00
infiniband
IB/isert: Fix incorrect release of isert connection
2023-06-21 16:01:00 +02:00
input
Input: adxl34x - do not hardcode interrupt trigger type
2023-07-19 16:21:17 +02:00
interconnect
interconnect: qcom: rpm: drop bogus pm domain attach
2023-05-11 23:03:28 +09:00
iommu
mm: always expand the stack with the mmap write lock held
2023-07-01 13:16:25 +02:00
ipack
…
irqchip
irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
2023-07-19 16:20:58 +02:00
isdn
use less confusing names for iov_iter direction initializers
2023-02-09 11:28:04 +01:00
leds
leds: tca6507: Fix error handling of using fwnode_property_read_string
2023-05-11 23:03:36 +09:00
macintosh
macintosh: via-pmu-led: requires ATA to be set
2023-05-11 23:03:31 +09:00
mailbox
mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()
2023-06-09 10:34:17 +02:00
mcb
mcb-pci: Reallocate memory region to avoid memory overlapping
2023-05-24 17:32:41 +01:00
md
md/raid1-10: submit write io directly if bitmap is not enabled
2023-07-19 16:20:58 +02:00
media
media: cec: core: don't set last_initiator if tx in progress
2023-06-28 11:12:35 +02:00
memory
memory: tegra30-emc: fix interconnect registration race
2023-03-22 13:33:56 +01:00
memstick
memstick r592: make memstick_debug_get_tpc_name() static
2023-07-19 16:21:08 +02:00
message
scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
2023-05-24 17:32:37 +01:00
mfd
mfd: intel-lpss: Add Intel Meteor Lake PCH-S LPSS PCI IDs
2023-05-24 17:32:42 +01:00
misc
eeprom: at24: also select REGMAP
2023-06-14 11:15:32 +02:00
mmc
mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019
2023-07-19 16:21:10 +02:00
most
…
mtd
mtdchar: mark bits of ioctl handler noinline
2023-06-09 10:34:24 +02:00
mux
…
net
ipvlan: Fix return value of ipvlan_queue_xmit()
2023-07-19 16:21:13 +02:00
nfc
nfcsim.c: Fix error checking for debugfs_create_dir
2023-06-28 11:12:36 +02:00
ntb
…
nubus
nubus: Partially revert proc_create_single_data() conversion
2023-07-05 18:27:37 +01:00
nvdimm
cxl/pmem: Fix nvdimm registration races
2023-03-10 09:34:20 +01:00
nvme
nvme-core: fix dev_pm_qos memleak
2023-07-19 16:20:57 +02:00
nvmem
nvmem: core: fix return value
2023-02-09 11:28:25 +01:00
of
of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset()
2023-06-21 16:00:51 +02:00
opp
OPP: fix error checking in opp_migrate_dentry()
2023-03-10 09:33:01 +01:00
parisc
parisc: Replace regular spinlock with spin_trylock on panic path
2023-05-24 17:32:42 +01:00
parport
…
pci
PCI/ACPI: Call _REG when transitioning D-states
2023-07-05 18:27:37 +01:00
pcmcia
…
peci
…
perf
drivers/perf: hisi: Don't migrate perf to the CPU going to teardown
2023-07-19 16:21:00 +02:00
phy
phy: qcom-qmp-pcie-msm8996: fix init-count imbalance
2023-06-09 10:34:23 +02:00
pinctrl
pinctrl: meson-axg: add missing GPIOA_18 gpio group
2023-06-14 11:15:28 +02:00
platform
platform/x86/amd/pmf: Register notify handler only if SPS is enabled
2023-06-28 11:12:34 +02:00
pnp
PNP: fix name memory leak in pnp_alloc_dev()
2022-12-31 13:31:56 +01:00
power
power: supply: Fix logic checking if system is running from battery
2023-06-21 16:00:52 +02:00
powercap
powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
2023-07-19 16:21:00 +02:00
pps
…
ps3
…
ptp
ptp_qoriq: fix memory leak in probe()
2023-04-06 12:10:44 +02:00
pwm
pwm: mtk-disp: Configure double buffering before reading in .get_state()
2023-05-11 23:03:37 +09:00
rapidio
rapidio: devices: fix missing put_device in mport_cdev_open
2022-12-31 13:32:00 +01:00
ras
…
regulator
regulator: core: Streamline debugfs operations
2023-07-19 16:21:06 +02:00
remoteproc
remoteproc: imx_dsp_rproc: Fix kernel test robot sparse warning
2023-05-24 17:32:53 +01:00
reset
reset: uniphier-glue: Fix possible null-ptr-deref
2023-02-01 08:34:05 +01:00
rpmsg
rpmsg: glink: Propagate TX failures in intentless mode as well
2023-05-11 23:03:16 +09:00
rtc
rtc: k3: handle errors while enabling wake irq
2023-05-11 23:03:33 +09:00
s390
s390/cio: unregister device when the only path is gone
2023-06-28 11:12:37 +02:00
sbus
…
scsi
scsi: megaraid_sas: Add flexible array member for SGLs
2023-06-14 11:15:15 +02:00
sh
…
siox
…
slimbus
…
soc
driver: soc: xilinx: use _safe loop iterator to avoid a use after free
2023-07-19 16:21:17 +02:00
soundwire
soundwire: qcom: add proper error paths in qcom_swrm_startup()
2023-06-28 11:12:38 +02:00
spi
spi: dw: Round of n_bytes to power of 2
2023-07-19 16:21:05 +02:00
spmi
spmi: Add a check for remove callback when removing a SPMI driver
2023-05-11 23:03:31 +09:00
ssb
…
staging
Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE"
2023-06-14 11:15:34 +02:00
target
scsi: target: iscsi: Prevent login threads from racing between each other
2023-06-28 11:12:35 +02:00
tc
…
tee
tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta'
2023-06-14 11:15:28 +02:00
thermal
thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
2023-07-19 16:21:01 +02:00
thunderbolt
thunderbolt: Mask ring interrupt on Intel hardware as well
2023-06-21 16:00:56 +02:00
tty
tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
2023-06-28 11:12:17 +02:00
ufs
scsi: ufs: ufs-pci: Add support for Intel Lunar Lake
2023-05-24 17:32:37 +01:00
uio
uio: uio_dmem_genirq: Fix deadlock between irq config and handling
2022-12-31 13:32:38 +01:00
usb
usb: gadget: udc: fix NULL dereference in remove()
2023-06-28 11:12:36 +02:00
vdpa
vduse: avoid empty string for dev name
2023-06-14 11:15:32 +02:00
vfio
vfio/type1: check pfn valid before converting to struct page
2023-06-05 09:26:19 +02:00
vhost
vhost_net: revert upend_idx only on retriable error
2023-06-28 11:12:40 +02:00
video
fbdev: fix potential OOB read in fast_imageblit()
2023-07-01 13:16:25 +02:00
virt
virt: sevguest: Add CONFIG_CRYPTO dependency
2023-07-19 16:20:55 +02:00
virtio
virtio_ring: don't update event idx on get_buf
2023-05-11 23:03:31 +09:00
vlynq
…
w1
w1: fix WARNING after calling w1_process()
2023-02-01 08:34:26 +01:00
watchdog
watchdog: menz069_wdt: fix watchdog initialisation
2023-06-09 10:34:07 +02:00
xen
xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
2023-05-30 14:03:32 +01:00
zorro
…
Kconfig
…
Makefile
…