shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-10 12:57:06 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
57062aa13e87b1a78a4a8f6cb5fab6ba24f5f488
linux/drivers
History
Johan Hovold 57062aa13e Bluetooth: qca: fix info leak when fetching fw build id 
commit cda0d6a198e2a7ec6f176c36173a57bdd8af7af2 upstream.

Add the missing sanity checks and move the 255-byte build-id buffer off
the stack to avoid leaking stack data through debugfs in case the
build-info reply is malformed.

Fixes: c0187b0bd3 ("Bluetooth: btqca: Add support to read FW build version for WCN3991 BTSoC")
Cc: stable@vger.kernel.org	# 5.12
Signed-off-by: Johan Hovold <johan+linaro@kernel.org>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-05-17 11:56:23 +02:00
..
accessibility
speakup: Avoid crash on very long word
2024-04-27 17:07:15 +02:00
acpi
ACPI: CPPC: Fix access width used for PCC registers
2024-05-02 16:29:29 +02:00
amba
…
android
binder: check offset alignment in binder_get_object()
2024-04-27 17:07:13 +02:00
ata
ata: sata_gemini: Check clk_enable() result
2024-05-17 11:56:05 +02:00
atm
atm: idt77252: fix a memleak in open_card_ubr0
2024-02-16 19:06:26 +01:00
auxdisplay
auxdisplay: hd44780: move cursor home after clear display command
2023-12-08 08:51:16 +01:00
base
driver core: Introduce device_link_wait_removal()
2024-04-10 16:28:32 +02:00
bcma
…
block
aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
2024-03-26 18:20:29 -04:00
bluetooth
Bluetooth: qca: fix info leak when fetching fw build id
2024-05-17 11:56:23 +02:00
bus
bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state
2024-04-13 13:05:16 +02:00
cdrom
…
char
timers: Get rid of del_singleshot_timer_sync()
2024-05-17 11:56:12 +02:00
clk
clk: Don't hold prepare_lock when calling kref_put()
2024-05-17 11:56:09 +02:00
clocksource
clocksource/drivers/arm_global_timer: Fix maximum prescaler value
2024-04-03 15:19:44 +02:00
comedi
comedi: vmk80xx: fix incomplete endpoint checking
2024-04-27 17:07:14 +02:00
connector
…
counter
…
cpufreq
cpufreq: Don't unregister cpufreq cooling on CPU hotplug
2024-04-13 13:05:00 +02:00
cpuidle
cpuidle: Avoid potential overflow in integer multiplication
2024-04-13 13:04:54 +02:00
crypto
crypto: qat - resolve race condition during AER recovery
2024-04-03 15:19:26 +02:00
cxl
cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
2024-03-01 13:26:31 +01:00
dax
…
dca
…
devfreq
PM / devfreq: Synchronize devfreq_monitor_[start/stop]
2024-02-05 20:12:47 +00:00
dio
…
dma
dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
2024-05-17 11:55:50 +02:00
dma-buf
dma-buf: Fix NULL pointer dereference in sanitycheck()
2024-04-10 16:28:21 +02:00
edac
EDAC/thunderx: Fix possible out-of-bounds string access
2024-01-25 15:27:18 -08:00
eisa
…
extcon
…
firewire
firewire: nosy: ensure user_length is taken into account when fetching packet contents
2024-05-17 11:56:16 +02:00
firmware
x86/efistub: Remap kernel text read-only before dropping NX attribute
2024-04-27 17:07:07 +02:00
fpga
…
fsi
…
gnss
…
gpio
gpiolib: cdev: fix uninitialised kfifo
2024-05-17 11:56:15 +02:00
gpu
drm/amd/display: Handle Y carry-over in VCP X.Y calculation
2024-05-17 11:56:21 +02:00
greybus
…
hid
HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
2024-05-02 16:29:28 +02:00
hsi
…
hte
…
hv
Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
2024-05-17 11:56:08 +02:00
hwmon
hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
2024-05-17 11:56:21 +02:00
hwspinlock
…
hwtracing
hwtracing: hisi_ptt: Move type check to the beginning of hisi_ptt_pmu_event_init()
2024-03-26 18:20:58 -04:00
i2c
i2c: smbus: fix NULL function pointer dereference
2024-05-02 16:29:32 +02:00
i3c
i3c: master: cdns: Update maximum prescaler value for i2c clock
2024-02-05 20:12:58 +00:00
idle
…
iio
iio: accel: mxc4005: Interrupt handling fixes
2024-05-17 11:56:19 +02:00
infiniband
qibfs: fix dentry leak
2024-05-17 11:56:10 +02:00
input
Input: imagis - use FIELD_GET where applicable
2024-04-13 13:05:13 +02:00
interconnect
Revert "interconnect: Teach lockdep about icc_bw_lock order"
2024-03-06 14:45:19 +00:00
iommu
iommu: mtk: fix module autoloading
2024-05-17 11:56:08 +02:00
ipack
…
irqchip
irqchip/gic-v3-its: Prevent double free on error
2024-05-02 16:29:29 +02:00
isdn
…
leds
leds: sgm3140: Add missing timer cleanup and flash gpio control
2024-03-26 18:20:52 -04:00
macintosh
…
mailbox
mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt
2024-02-05 20:12:58 +00:00
mcb
mcb: fix error handling for different scenarios when parsing
2023-11-28 17:07:13 +00:00
md
dm integrity: fix out-of-range warning
2024-04-10 16:28:23 +02:00
media
media: cec: core: remove length check of Timer Status
2024-04-17 11:18:23 +02:00
memory
…
memstick
…
message
…
mfd
mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref
2024-03-26 18:20:50 -04:00
misc
mei: me: add lunar lake point M DID
2024-05-17 11:56:20 +02:00
mmc
mmc: sdhci-msm: pervent access to suspended controller
2024-05-02 16:29:28 +02:00
most
…
mtd
mtd: diskonchip: work around ubsan link failure
2024-05-02 16:29:30 +02:00
mux
…
net
net: hns3: fix kernel crash when devlink reload during initialization
2024-05-17 11:56:14 +02:00
nfc
NFC: trf7970a: disable all regulators on removal
2024-05-02 16:29:24 +02:00
ntb
NTB: fix possible name leak in ntb_register_device()
2024-03-26 18:20:49 -04:00
nubus
…
nvdimm
…
nvme
nvme: fix warn output about shared namespaces without CONFIG_NVME_MULTIPATH
2024-05-17 11:55:56 +02:00
nvmem
nvmem: meson-efuse: fix function pointer type mismatch
2024-04-03 15:19:32 +02:00
of
of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
2024-04-10 16:28:32 +02:00
opp
OPP: debugfs: Fix warning around icc_get_name()
2024-03-26 18:20:42 -04:00
parisc
parisc/power: Fix power soft-off button emulation on qemu
2024-01-31 16:16:59 -08:00
parport
parport: parport_serial: Add Brainboxes device IDs and geometry
2024-01-20 11:50:11 +01:00
pci
PCI/ASPM: Fix deadlock when enabling ASPM
2024-04-27 17:07:18 +02:00
pcmcia
…
peci
…
perf
drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported
2024-04-10 16:28:30 +02:00
phy
phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered
2024-05-02 16:29:31 +02:00
pinctrl
pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
2024-05-17 11:55:55 +02:00
platform
platform/x86: intel-vbtn: Update tablet mode switch at end of probe
2024-04-13 13:05:26 +02:00
pnp
PNP: ACPI: fix fortify warning
2024-02-05 20:12:47 +00:00
power
power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator
2024-05-17 11:55:55 +02:00
powercap
powercap: dtpm_cpu: Fix error check against freq_qos_add_request()
2024-03-26 18:20:36 -04:00
pps
…
ps3
…
ptp
ptp: annotate data-race around q->head and q->tail
2023-11-28 17:07:05 +00:00
pwm
pwm: img: fix pwm clock lookup
2024-04-03 15:19:45 +02:00
rapidio
…
ras
…
regulator
regulator: core: fix debugfs creation regression
2024-05-17 11:56:22 +02:00
remoteproc
remoteproc: virtio: Fix wdg cannot recovery remote processor
2024-04-03 15:19:24 +02:00
reset
reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
2024-01-20 11:50:07 +01:00
rpmsg
rpmsg: virtio: Free driver_override when rpmsg_remove()
2024-01-31 16:16:59 -08:00
rtc
rtc: mt6397: select IRQ_DOMAIN instead of depending on it
2024-03-26 18:20:58 -04:00
s390
s390/qeth: Fix kernel panic after setting hsuid
2024-05-17 11:56:01 +02:00
sbus
…
scsi
scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
2024-05-17 11:56:04 +02:00
sh
…
siox
…
slimbus
slimbus: qcom-ngd-ctrl: Add timeout for wait operation
2024-05-17 11:56:20 +02:00
soc
soc: fsl: qbman: Use raw spinlock for cgr_lock
2024-04-03 15:19:36 +02:00
soundwire
ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710) laptops
2024-04-13 13:05:07 +02:00
spi
spi: microchip-core-qspi: fix setting spi bus clock rate
2024-05-17 11:56:22 +02:00
spmi
spmi: mediatek: Fix UAF on device remove
2024-02-05 20:12:58 +00:00
ssb
…
staging
timers: Get rid of del_singleshot_timer_sync()
2024-05-17 11:56:12 +02:00
target
scsi: target: Fix SELinux error when systemd-modules loads the target module
2024-05-17 11:56:07 +02:00
tc
…
tee
tee: optee: Fix kernel panic caused by incorrect error handling
2024-04-03 15:19:42 +02:00
thermal
thermal/of: Assume polling-delay(-passive) 0 when absent
2024-04-13 13:05:19 +02:00
thunderbolt
thunderbolt: Fix wake configurations after device unplug
2024-04-27 17:07:14 +02:00
tty
serial: stm32: Reset .throttled state in .startup()
2024-04-27 17:07:14 +02:00
ufs
scsi: ufs: core: WLUN suspend dev/link state error recovery
2024-05-17 11:56:05 +02:00
uio
uio_hv_generic: Don't free decrypted memory
2024-05-17 11:56:08 +02:00
usb
usb: typec: tcpm: Check for port partner validity before consuming it
2024-05-17 11:56:18 +02:00
vdpa
vdpa/mlx5: Allow CVQ size changes
2024-03-26 18:21:00 -04:00
vfio
vfio/fsl-mc: Block calling interrupt handler without trigger
2024-04-03 15:19:47 +02:00
vhost
vhost: Add smp_rmb() in vhost_enable_notify()
2024-04-17 11:18:27 +02:00
video
fbdev: fix incorrect address computation in deferred IO
2024-05-02 16:29:30 +02:00
virt
…
virtio
virtio: reenable config if freezing device failed
2024-04-13 13:05:25 +02:00
vlynq
…
w1
…
watchdog
watchdog: stm32_iwdg: initialize default timeout
2024-03-26 18:20:56 -04:00
xen
xen/events: close evtchn after mapping cleanup
2024-03-06 14:45:20 +00:00
zorro
…
Kconfig
…
Makefile
…