shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-03-25 12:00:22 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
751008ea77489698fd469c565f2382079f31c00a
linux/drivers
History
Gaosheng Cui 1eee2b49a7 scsi: snic: Fix possible UAF in snic_tgt_create() 
[ Upstream commit e118df4923 ]

Smatch reports a warning as follows:

drivers/scsi/snic/snic_disc.c:307 snic_tgt_create() warn:
  '&tgt->list' not removed from list

If device_add() fails in snic_tgt_create(), tgt will be freed, but
tgt->list will not be removed from snic->disc.tgt_list, then list traversal
may cause UAF.

Remove from snic->disc.tgt_list before free().

Fixes: c8806b6c9e ("snic: driver for Cisco SCSI HBA")
Signed-off-by: Gaosheng Cui <cuigaosheng1@huawei.com>
Link: https://lore.kernel.org/r/20221117035100.2944812-1-cuigaosheng1@huawei.com
Acked-by: Narsimhulu Musini <nmusini@cisco.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-06-29 09:27:20 +09:00
..
accessibility
…
acpi
ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
2023-06-29 09:27:17 +09:00
amba
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2023-05-16 12:02:23 +09:00
amlogic
ODROID-G12: Fix flicking with LG 1080p monitors.
2023-05-31 10:39:07 +09:00
android
binder: use wake_up_pollfree()
2023-05-16 12:22:16 +09:00
ata
ata: pata_legacy: fix pdc20230_set_piomode()
2023-06-29 09:27:05 +09:00
atm
atm: idt77252: fix use-after-free bugs caused by tst_timer
2023-06-29 09:26:48 +09:00
auxdisplay
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
2023-05-16 12:15:31 +09:00
base
driver core: Don't probe devices after bus_type.match() probe deferral
2023-06-29 09:26:53 +09:00
bcma
bcma: Fix memory leak for internally-handled cores
2023-05-16 11:44:50 +09:00
block
loop: Check for overflow while configuring loop
2023-06-29 09:26:50 +09:00
bluetooth
Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
2023-06-29 09:27:20 +09:00
bus
bus: sunxi-rsb: Support atomic transfers
2023-06-29 09:27:10 +09:00
cdrom
cdrom: gdrom: initialize global variable at init time
2023-05-16 11:05:40 +09:00
char
random: use expired timer rather than wq for mixing fast pool
2023-06-29 09:26:57 +09:00
clk
clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
2023-06-29 09:27:18 +09:00
clocksource
clocksource/drivers/sp804: Avoid error on multiple instances
2023-06-29 09:26:24 +09:00
connector
…
cpufreq
cpufreq: pmac32-cpufreq: Fix refcount leak bug
2023-06-29 09:26:43 +09:00
cpuidle
cpuidle: dt: Return the correct numbers of parsed idle states
2023-06-29 09:27:16 +09:00
crypto
crypto: ccp - ccp_dmaengine_unregister release dma channels
2023-06-29 09:26:01 +09:00
dax
…
dca
…
devfreq
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
2023-05-16 09:14:54 +09:00
dio
…
dma
dmaengine: at_hdmac: Check return code of dma_async_device_register
2023-06-29 09:27:08 +09:00
dma-buf
dma-buf: Fix memory leak in sync_file_merge()
2023-05-15 16:17:55 +09:00
edac
EDAC: Fix calculation of returned address and next offset in edac_align_ptr()
2023-05-16 12:43:19 +09:00
eisa
…
extcon
extcon: max8997: Add missing modalias string
2023-05-16 11:24:53 +09:00
firewire
firewire: core: extend card->lock in fw_core_handle_bus_reset
2023-06-29 09:26:13 +09:00
firmware
firmware: google: Test spinlock on panic path to avoid lockups
2023-06-29 09:27:00 +09:00
fmc
…
fpga
…
gpio
gpio: amd8111: Fix PCI device reference count leak
2023-06-29 09:27:14 +09:00
gpu
drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
2023-06-29 09:27:18 +09:00
hardkernel
ODROID-G12: Make hid-multitouch and dwav-usb-mt driver as mouldes.
2022-03-15 09:20:56 +09:00
hid
HID: hid-sensor-custom: set fixed size for custom attributes
2023-06-29 09:27:18 +09:00
hsi
HSI: omap_ssi_port: Fix dma_map_sg error check
2023-06-29 09:27:00 +09:00
hv
Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
2023-06-29 09:26:54 +09:00
hwmon
hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
2023-06-29 09:27:12 +09:00
hwspinlock
…
hwtracing
coresight: Fix TRCCONFIGR.QE sysfs interface
2023-06-29 09:25:59 +09:00
i2c
i2c: xiic: Add platform module alias
2023-06-29 09:27:06 +09:00
ide
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2023-05-16 09:04:57 +09:00
idle
x86/cpu: Sanitize FAM6_ATOM naming
2023-05-15 12:46:28 +09:00
iio
iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
2023-06-29 09:27:12 +09:00
infiniband
RDMA/rxe: Fix the error caused by qp->sk
2023-06-29 09:27:00 +09:00
input
Input: elants_i2c - properly handle the reset GPIO when power is off
2023-06-29 09:27:18 +09:00
iommu
iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
2023-06-29 09:27:13 +09:00
ipack
ipack: ipoctal: fix module reference leak
2023-05-16 11:53:57 +09:00
irqchip
irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
2023-06-29 09:27:16 +09:00
isdn
mISDN: fix misuse of put_device() in mISDN_register_device()
2023-06-29 09:27:08 +09:00
leds
leds: ktd2692: Fix an error handling path
2023-05-16 11:24:56 +09:00
lguest
…
lightnvm
lightnvm: disable the subsystem
2023-06-29 09:26:11 +09:00
macintosh
macintosh/adb: fix oob read in do_adb_query() function
2023-06-29 09:26:46 +09:00
mailbox
mailbox: handle failed named mailbox channel request
2023-05-15 14:08:07 +09:00
mcb
mcb: fix error handling in mcb_alloc_bus()
2023-05-16 11:53:10 +09:00
md
dm ioctl: fix misbehavior if list_versions races with module loading
2023-06-29 09:27:09 +09:00
media
media: coda: Add check for kmalloc
2023-06-29 09:27:19 +09:00
memory
memory: of: Fix refcount leak bug in of_get_ddr_timings()
2023-06-29 09:26:59 +09:00
memstick
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2023-05-16 12:14:44 +09:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2023-05-16 09:45:15 +09:00
mfd
mfd: sm501: Add check for platform_driver_register()
2023-06-29 09:27:01 +09:00
misc
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
2023-06-29 09:27:10 +09:00
mmc
mmc: mmci: fix return value check of mmc_add_host()
2023-06-29 09:27:19 +09:00
mtd
mtd: maps: pxa2xx-flash: fix memory leak in probe
2023-06-29 09:27:18 +09:00
net
stmmac: fix potential division by 0
2023-06-29 09:27:20 +09:00
nfc
nfc: st-nci: fix memory leaks in EVT_TRANSACTION
2023-06-29 09:27:11 +09:00
ntb
NTB: hw: amd: fix an issue about leak system resources
2023-05-16 09:39:21 +09:00
nubus
…
nvdimm
libnvdimm/dimm: Avoid race between probe and available_slots_show()
2023-05-16 10:38:48 +09:00
nvme
nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
2023-06-29 09:26:55 +09:00
nvmem
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2023-05-16 12:00:53 +09:00
of
fdt: Update CRC check for rng-seed
2023-06-29 09:26:40 +09:00
oprofile
…
parisc
parisc: Export iosapic_serial_irq() symbol for serial port driver
2023-06-29 09:27:06 +09:00
parport
parport_pc: Avoid FIFO port location truncation
2023-06-29 09:27:08 +09:00
pci
PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
2023-06-29 09:26:57 +09:00
pcmcia
pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
2023-06-29 09:26:22 +09:00
perf
drivers/perf: arm_pmu: Fix failure path in PM notifier
2023-05-15 14:09:37 +09:00
phy
phy: samsung: exynos5250-sata: fix missing device put in probe error paths
2023-06-29 09:26:12 +09:00
pinctrl
pinctrl: pinconf-generic: add missing of_node_put()
2023-06-29 09:27:18 +09:00
platform
platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
2023-06-29 09:27:11 +09:00
pnp
PNP: fix name memory leak in pnp_alloc_dev()
2023-06-29 09:27:16 +09:00
power
soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
2023-06-29 09:27:16 +09:00
powercap
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
2023-06-29 09:27:01 +09:00
pps
drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
2023-05-15 14:08:51 +09:00
ps3
powerpc/ps3: use dma_mapping_error()
2023-05-16 09:58:13 +09:00
ptp
ptp: replace snprintf with sysfs_emit
2023-06-29 09:26:07 +09:00
pwm
pwm: lp3943: Fix duty calculation in case period was clamped
2023-06-29 09:26:22 +09:00
rapidio
rapidio: devices: fix missing put_device in mport_cdev_open
2023-06-29 09:27:17 +09:00
ras
…
regulator
regulator: core: fix module refcount leak in set_supply()
2023-06-29 09:27:18 +09:00
remoteproc
remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
2023-06-29 09:26:04 +09:00
reset
Revert "This driver allows GPIO lines to be used as reset signals."
2023-05-16 17:15:02 +09:00
rpmsg
rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
2023-06-29 09:26:22 +09:00
rtc
rtc: mt6397: check return value after calling platform_get_resource()
2023-06-29 09:26:23 +09:00
s390
s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
2023-06-29 09:26:54 +09:00
sbus
drivers/sbus/char: add of_node_put()
2023-05-15 10:37:00 +09:00
scsi
scsi: snic: Fix possible UAF in snic_tgt_create()
2023-06-29 09:27:20 +09:00
sfi
…
sh
maple: fix wrong return value of maple_bus_init().
2023-05-16 12:16:16 +09:00
sn
…
soc
drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
2023-06-29 09:27:15 +09:00
spi
spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
2023-06-29 09:26:58 +09:00
spmi
…
ssb
ssb: sdio: Don't overwrite const buffer if block_write fails
2023-05-16 11:22:54 +09:00
staging
media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
2023-06-29 09:27:06 +09:00
target
scsi: target: iscsi: Make sure the np under each tpg is unique
2023-05-16 12:41:58 +09:00
tc
TC: Set DMA masks for devices
2023-05-15 09:23:01 +09:00
tee
UPSTREAM: tee: shm: fix use-after-free via temporarily dropped reference
2023-05-16 09:46:44 +09:00
thermal
thermal: intel_powerclamp: Use first online CPU as control_cpu
2023-06-29 09:27:03 +09:00
thunderbolt
thunderbolt: Use 32-bit writes when writing ring producer/consumer
2023-05-15 14:55:28 +09:00
tty
serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
2023-06-29 09:27:11 +09:00
uio
uio_pdrv_genirq: fix use without device tree and no interrupt
2023-05-16 08:31:00 +09:00
usb
USB: serial: cp210x: add Kamstrup RF sniffer PIDs
2023-06-29 09:27:15 +09:00
uwb
uwb: hwa-rc: fix memory leak at probe
2023-05-15 08:28:33 +09:00
vfio
vfio: Clear the caps->buf to NULL after free
2023-06-29 09:26:49 +09:00
vhost
vringh: Fix loop descriptors check in the indirect cases
2023-06-29 09:26:24 +09:00
video
Revert "fbdev: fb_pm2fb: Avoid potential divide by zero error"
2023-06-29 09:27:13 +09:00
virt
drivers/virt/fsl_hypervisor: Fix error handling path
2023-05-16 09:38:07 +09:00
virtio
virtio_mmio: Restore guest page size on resume
2023-06-29 09:26:43 +09:00
vlynq
…
vme
vme: bridges: reduce stack usage
2023-05-15 16:59:11 +09:00
w1
w1: w1_therm: fixes w1_seq for ds28ea00 sensors
2023-06-29 09:26:07 +09:00
watchdog
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
2023-05-16 12:15:35 +09:00
xen
xen/platform-pci: add missing free_irq() in error path
2023-06-29 09:27:11 +09:00
zorro
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:50:44 +02:00
Kconfig
ODROID: sysfs: Add poweroff_trigger sysfs node.
2019-12-11 18:21:09 +09:00
Makefile
ODROID: sysfs: Add poweroff_trigger sysfs node.
2019-12-11 18:21:09 +09:00