shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-03-24 19:40:21 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
5a4087a907769aeb9990a9bfa5076ccc505a2ce0
linux/drivers
History
Zack Rusin 5a4087a907 drm/vmwgfx: Fix possible invalid drm gem put calls 
commit f9e96bf190 upstream.

vmw_bo_unreference sets the input buffer to null on exit, resulting in
null ptr deref's on the subsequent drm gem put calls.

This went unnoticed because only very old userspace would be exercising
those paths but it wouldn't be hard to hit on old distros with brand
new kernels.

Introduce a new function that abstracts unrefing of user bo's to make
the code cleaner and more explicit.

Signed-off-by: Zack Rusin <zackr@vmware.com>
Reported-by: Ian Forbes <iforbes@vmware.com>
Fixes: 9ef8d83e8e ("drm/vmwgfx: Do not drop the reference to the handle too soon")
Cc: <stable@vger.kernel.org> # v6.4+
Reviewed-by: Maaz Mombasawala<mombasawalam@vmware.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20230818041301.407636-1-zack@kde.org
Signed-off-by: Jocelyn Falempe <jfalempe@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-01-25 15:27:41 -08:00
..
accessibility
tty: fix possible null-ptr-defer in spk_ttyio_release
2023-01-24 07:24:37 +01:00
acpi
ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
2024-01-25 15:27:21 -08:00
amba
amba: bus: fix refcount leak
2023-09-13 09:42:56 +02:00
android
binder: fix race between mmput() and do_exit()
2024-01-25 15:27:39 -08:00
ata
scsi: sd: Fix system start for ATA devices
2023-12-08 08:51:14 +01:00
atm
atm: solos-pci: Fix potential deadlock on &tx_queue_lock
2023-12-20 17:00:16 +01:00
auxdisplay
auxdisplay: hd44780: move cursor home after clear display command
2023-12-08 08:51:16 +01:00
base
mm/memory_hotplug: add missing mem_hotplug_lock
2024-01-10 17:10:33 +01:00
bcma
…
block
null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
2024-01-25 15:27:30 -08:00
bluetooth
Bluetooth: btmtkuart: fix recv_buf() return value
2024-01-25 15:27:30 -08:00
bus
bus: ti-sysc: Flush posted write only after srst_udelay
2024-01-01 12:39:07 +00:00
cdrom
…
char
hwrng: geode - fix accessing registers
2023-11-20 11:52:04 +01:00
clk
clk: si5341: fix an error code problem in si5341_output_clk_set_rate
2024-01-25 15:27:36 -08:00
clocksource
clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings
2024-01-25 15:27:39 -08:00
comedi
comedi: adv_pci1760: Fix PWM instruction handling
2023-01-24 07:24:35 +01:00
connector
…
counter
counter: microchip-tcb-capture: Fix the use of internal GCLK logic
2023-10-19 23:08:58 +02:00
cpufreq
cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
2024-01-25 15:27:20 -08:00
cpuidle
powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
2023-09-13 09:42:48 +02:00
crypto
crypto: sahara - do not resize req->src when doing hash operations
2024-01-25 15:27:23 -08:00
cxl
cxl/port: Fix NULL pointer access in devm_cxl_add_port()
2023-11-28 17:07:23 +00:00
dax
dax/kmem: Pass valid argument to memory_group_register_static
2023-07-19 16:21:43 +02:00
dca
…
devfreq
PM / devfreq: rockchip-dfi: Make pmu regmap mandatory
2023-11-20 11:51:54 +01:00
dio
drivers: dio: fix possible memory leak in dio_init()
2022-12-31 13:32:38 +01:00
dma
dmaengine: stm32-dma: avoid bitfield overflow assertion
2023-12-20 17:00:25 +01:00
dma-buf
dma-buf: fix check in dma_resv_add_fence
2023-12-08 08:51:15 +01:00
edac
EDAC/thunderx: Fix possible out-of-bounds string access
2024-01-25 15:27:18 -08:00
eisa
…
extcon
extcon: cht_wc: add POWER_SUPPLY dependency
2023-09-13 09:42:53 +02:00
firewire
firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards
2024-01-10 17:10:35 +01:00
firmware
firmware: meson_sm: populate platform devices from sm device tree data
2024-01-25 15:27:24 -08:00
fpga
fpga: bridge: fix kernel-doc parameter description
2023-05-11 23:03:27 +09:00
fsi
fsi: aspeed: Reset master errors after CFAM reset
2023-09-13 09:42:54 +02:00
gnss
…
gpio
gpio: dwapb: mask/unmask IRQ when disable/enale it
2024-01-01 12:39:07 +00:00
gpu
drm/vmwgfx: Fix possible invalid drm gem put calls
2024-01-25 15:27:41 -08:00
greybus
…
hid
HID: nintendo: Prevent divide-by-zero on code
2024-01-20 11:50:09 +01:00
hsi
HSI: omap_ssi_core: Fix error handling in ssi_init()
2022-12-31 13:32:45 +01:00
hte
hte: tegra: Fix missing error code in tegra_hte_test_probe()
2023-11-20 11:51:58 +01:00
hv
Drivers: hv: vmbus: Don't dereference ACPI root object handle
2023-09-13 09:42:59 +02:00
hwmon
hwmon: (corsair-psu) Fix probe when built-in
2024-01-20 11:50:06 +01:00
hwspinlock
hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation
2023-09-19 12:28:05 +02:00
hwtracing
coresight: etm4x: Fix width of CCITMIN field
2024-01-20 11:50:11 +01:00
i2c
i2c: rk3x: fix potential spinlock recursion on poll
2024-01-20 11:50:09 +01:00
i3c
i3c: master: svc: fix random hot join failure since timeout error
2023-11-28 17:07:17 +00:00
idle
intel_idle: add Emerald Rapids Xeon support
2023-10-10 22:00:44 +02:00
iio
iio: imu: adis16475: add spi_device_id table
2024-01-05 15:18:37 +01:00
infiniband
IB/iser: Prevent invalidating wrong MR
2024-01-25 15:27:38 -08:00
input
Input: atkbd - use ab83 as id when skipping the getid command
2024-01-25 15:27:39 -08:00
interconnect
Revert "interconnect: qcom: sm8250: Enable sync_state"
2024-01-10 17:10:37 +01:00
iommu
iommu: Avoid more races around device probe
2023-12-13 18:39:17 +01:00
ipack
…
irqchip
irqchip/stm32-exti: add missing DT IRQ flag translation
2023-11-08 14:10:57 +01:00
isdn
mISDN: Update parameter type of dsp_cmx_send()
2023-08-16 18:27:26 +02:00
leds
leds: ledtrig-tty: Free allocated ttyname buffer on deactivate
2024-01-20 11:50:11 +01:00
macintosh
macintosh: via-pmu-led: requires ATA to be set
2023-05-11 23:03:31 +09:00
mailbox
mailbox: qcom-ipcc: fix incorrect num_chans counting
2023-09-19 12:27:58 +02:00
mcb
mcb: fix error handling for different scenarios when parsing
2023-11-28 17:07:13 +00:00
md
md: synchronize flush io with array reconfiguration
2024-01-25 15:27:25 -08:00
media
media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()
2024-01-25 15:27:35 -08:00
memory
memory: brcmstb_dpfe: fix testing array offset after use
2023-07-19 16:21:24 +02:00
memstick
memstick r592: make memstick_debug_get_tpc_name() static
2023-07-19 16:21:08 +02:00
message
scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
2023-05-24 17:32:37 +01:00
mfd
mfd: qcom-spmi-pmic: Fix revid implementation
2023-11-28 17:07:12 +00:00
misc
accel/habanalabs: fix information leak in sec_attest_info()
2024-01-25 15:27:37 -08:00
mmc
mmc: sdhci_omap: Fix TI SoC dependencies
2024-01-25 15:27:38 -08:00
most
…
mtd
mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
2024-01-25 15:27:21 -08:00
mux
…
net
xen-netback: don't produce zero-size SKB frags
2024-01-25 15:27:39 -08:00
nfc
nfcsim.c: Fix error checking for debugfs_create_dir
2023-06-28 11:12:36 +02:00
ntb
ntb: Fix calculation ntb_transport_tx_free_entry()
2023-09-13 09:43:02 +02:00
nubus
nubus: Partially revert proc_create_single_data() conversion
2023-07-05 18:27:37 +01:00
nvdimm
nd_btt: Make BTT lanes preemptible
2023-11-20 11:52:05 +01:00
nvme
nvme: prevent potential spectre v1 gadget
2024-01-20 11:50:06 +01:00
nvmem
nvmem: imx: correct nregs for i.MX6UL
2023-11-02 09:35:31 +01:00
of
of: unittest: Fix of_count_phandle_with_args() expected value message
2024-01-25 15:27:38 -08:00
opp
OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
2023-09-13 09:42:28 +02:00
parisc
parisc/power: Fix power soft-off when running on qemu
2023-11-28 17:07:14 +00:00
parport
parport: parport_serial: Add Brainboxes device IDs and geometry
2024-01-20 11:50:11 +01:00
pci
PCI: Add ACS quirk for more Zhaoxin Root Ports
2024-01-20 11:50:11 +01:00
pcmcia
pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
2023-11-20 11:52:13 +01:00
peci
…
perf
perf: hisi: Fix use-after-free when register pmu fails
2023-11-20 11:52:01 +01:00
phy
phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
2023-10-25 12:03:16 +02:00
pinctrl
pinctrl: cy8c95x0: Fix get_pincfg
2024-01-20 11:50:09 +01:00
platform
platform/x86/intel/vsec: Fix xa_alloc memory leak
2024-01-25 15:27:20 -08:00
pnp
PNP: fix name memory leak in pnp_alloc_dev()
2022-12-31 13:31:56 +01:00
power
power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint
2023-11-08 14:11:02 +01:00
powercap
powercap: DTPM: Fix missing cpufreq_cpu_put() calls
2023-12-13 18:39:21 +01:00
pps
…
ps3
…
ptp
ptp: annotate data-race around q->head and q->tail
2023-11-28 17:07:05 +00:00
pwm
pwm: stm32: Fix enable count for clk in .probe()
2024-01-25 15:27:37 -08:00
rapidio
rapidio: devices: fix missing put_device in mport_cdev_open
2022-12-31 13:32:00 +01:00
ras
…
regulator
regulator: mt6358: Fail probe on unknown chip ID
2023-11-20 11:51:56 +01:00
remoteproc
remoteproc: imx_dsp_rproc: Fix kernel test robot sparse warning
2023-05-24 17:32:53 +01:00
reset
reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
2024-01-20 11:50:07 +01:00
rpmsg
rpmsg: glink: Add check for kstrdup
2023-09-13 09:42:58 +02:00
rtc
rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
2023-11-20 11:52:13 +01:00
s390
s390/scm: fix virtual vs physical address confusion
2024-01-20 11:50:08 +01:00
sbus
…
scsi
scsi: hisi_sas: Correct the number of global debugfs registers
2024-01-25 15:27:28 -08:00
sh
…
siox
…
slimbus
…
soc
soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
2024-01-25 15:27:28 -08:00
soundwire
soundwire: stream: fix NULL pointer dereference for multi_link
2023-12-20 17:00:25 +01:00
spi
spi: sh-msiof: Enforce fixed DTDL for R-Car H3
2024-01-25 15:27:20 -08:00
spmi
spmi: Add a check for remove callback when removing a SPMI driver
2023-05-11 23:03:31 +09:00
ssb
…
staging
media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls
2024-01-25 15:27:32 -08:00
target
scsi: target: core: Fix deadlock due to recursive locking
2023-10-10 22:00:41 +02:00
tc
…
tee
tee: optee: Fix supplicant based device enumeration
2023-12-13 18:39:12 +01:00
thermal
thermal: core: prevent potential string overflow
2023-11-20 11:51:54 +01:00
thunderbolt
thunderbolt: Fix memory leak in margining_port_remove()
2024-01-01 12:39:08 +00:00
tty
serial: omap: do not override settings for RS485 support
2024-01-25 15:27:41 -08:00
ufs
scsi: ufs: core: Leave space for '\0' in utf8 desc string
2023-11-20 11:52:07 +01:00
uio
uio: Fix use-after-free in uio_open
2024-01-20 11:50:10 +01:00
usb
usb: mon: Fix atomicity violation in mon_bin_vma_fault
2024-01-25 15:27:40 -08:00
vdpa
vdpa/mlx5: preserve CVQ vringh index
2023-12-13 18:39:03 +01:00
vfio
vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent()
2023-10-06 14:56:45 +02:00
vhost
vhost-vdpa: fix use after free in vhost_vdpa_probe()
2023-11-28 17:07:04 +00:00
video
fbdev: imxfb: fix left margin setting
2024-01-25 15:27:38 -08:00
virt
virt: sevguest: Fix passing a stack buffer as a scatterlist target
2023-11-20 11:52:13 +01:00
virtio
virtio_pci: fix the common cfg map size
2023-11-02 09:35:23 +01:00
vlynq
…
w1
w1: fix loop in w1_fini()
2023-07-19 16:21:48 +02:00
watchdog
watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
2024-01-25 15:27:36 -08:00
xen
xen: simplify evtchn_do_upcall() call maze
2023-12-08 08:51:20 +01:00
zorro
…
Kconfig
…
Makefile
…