Christophe Kerello c50336dfcb mtd: rawnand: stm32_fmc2: fix ECC overwrite ...

commit 811c0da4542df3c065f6cb843ced68780e27bb44 upstream.

In case OOB write is requested during a data write, ECC is currently
lost. Avoid this issue by only writing in the free spare area.
This issue has been seen with a YAFFS2 file system.

Signed-off-by: Christophe Kerello <christophe.kerello@foss.st.com>
Cc: stable@vger.kernel.org
Fixes: 2cd457f328 ("mtd: rawnand: stm32_fmc2: add STM32 FMC2 NAND flash controller driver")
Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-09-19 16:32:03 +02:00

..

accel

accel/qaic: Mask out SR-IOV PCI resources

2025-06-04 14:42:15 +02:00

accessibility

speakup: Fix sizeof() vs ARRAY_SIZE() bug

2024-06-12 11:11:18 +02:00

acpi

ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()

2025-09-09 18:56:25 +02:00

amba

…

android

binder: fix UAF caused by offsets overwrite

2024-09-12 11:11:41 +02:00

ata

ata: libata-scsi: Return aborted command when missing sense and result TF

2025-08-28 16:28:42 +02:00

atm

atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

2025-09-04 15:30:21 +02:00

auxdisplay

auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common"

2025-06-04 14:42:01 +02:00

base

x86/vmscape: Enable the mitigation

2025-09-11 17:20:27 +02:00

bcma

…

block

drbd: add missing kref_get in handle_write_conflicts

2025-08-28 16:28:15 +02:00

bluetooth

Bluetooth: vhci: Prevent use-after-free by removing debugfs files early

2025-09-09 18:56:21 +02:00

bus

bus: mhi: host: Detect events pointing to unexpected TREs

2025-08-28 16:28:33 +02:00

cache

…

cdrom

cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()

2024-11-01 01:58:25 +01:00

cdx

cdx: Fix off-by-one error in cdx_rpmsg_probe()

2025-08-28 16:28:45 +02:00

char

ipmi: Fix strcpy source and destination the same

2025-08-28 16:28:29 +02:00

clk

clk: qcom: ipq5018: keep XO clock always on

2025-08-28 16:28:26 +02:00

clocksource

clocksource: mips-gic-timer: Enable counter when CPUs start

2025-06-04 14:42:06 +02:00

comedi

comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()

2025-08-28 16:28:45 +02:00

connector

…

counter

counter: interrupt-cnt: Protect enable/disable OPs with mutex

2025-06-19 15:28:31 +02:00

cpufreq

cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()

2025-09-09 18:56:35 +02:00

cpuidle

cpuidle: governors: menu: Avoid selecting states with too much latency

2025-08-28 16:28:45 +02:00

crypto

crypto: qat - flush misc workqueue during device shutdown

2025-08-28 16:28:33 +02:00

cxl

cxl/region: Add a dev_err() on missing target list entries

2025-07-06 11:00:06 +02:00

dax

dax: delete a stale directory pmem

2024-12-09 10:32:21 +01:00

dca

…

devfreq

PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()

2025-08-28 16:28:16 +02:00

dio

…

dma

dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()

2025-09-09 18:56:35 +02:00

dma-buf

dma-buf: fix timeout handling in dma_resv_wait_timeout v2

2025-07-10 16:03:19 +02:00

edac

EDAC/altera: Delete an inappropriate dma_free_coherent() call

2025-09-19 16:32:03 +02:00

eisa

…

extcon

extcon: max8997: select IRQ_DOMAIN instead of depending on it

2024-06-12 11:12:27 +02:00

firewire

firewire: core: correct range of block for case of switch statement

2024-10-04 16:29:28 +02:00

firmware

firmware: tegra: Fix IVC dependency problems

2025-08-28 16:28:17 +02:00

fpga

fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()

2025-08-28 16:28:45 +02:00

fsi

…

gnss

…

gpio

gpio: tps65912: check the return value of regmap_update_bits()

2025-08-28 16:28:17 +02:00

gpu

drm/amd/amdgpu: Fix missing error return on kzalloc failure

2025-09-09 18:56:33 +02:00

greybus

greybus: Fix use-after-free bug in gb_interface_release due to race condition.

2024-06-21 14:38:48 +02:00

hid

HID: mcp2221: Handle reads greater than 60 bytes

2025-09-04 15:30:28 +02:00

hsi

HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition

2025-04-25 10:45:38 +02:00

hte

…

hv

Drivers: hv: vmbus: Add utility function for querying ring size

2025-07-06 11:00:09 +02:00

hwmon

hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM

2025-09-09 18:56:32 +02:00

hwspinlock

hwspinlock: Introduce hwspin_lock_bust()

2024-09-08 07:54:43 +02:00

hwtracing

coresight: Only check bottom two claim bits

2025-07-06 11:00:07 +02:00

i2c

i2c: i801: Hide Intel Birch Stream SoC TCO WDT

2025-09-19 16:32:03 +02:00

i3c

i3c: master: Initialize ret in i3c_i2c_notifier_call()

2025-08-28 16:28:28 +02:00

idle

intel_idle: Allow loading ACPI tables for any family

2025-08-28 16:28:14 +02:00

iio

iio: pressure: mprls0025pa: use aligned_s64 for timestamp

2025-09-09 18:56:30 +02:00

infiniband

RDMA/bnxt_re: Fix to initialize the PBL array

2025-08-28 16:28:48 +02:00

input

Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT

2025-08-01 09:47:28 +01:00

interconnect

interconnect: qcom: sc8180x: specify num_nodes

2025-08-15 12:08:44 +02:00

iommu

iommu/amd: Avoid stack buffer overflow from kernel cmdline

2025-08-28 16:28:48 +02:00

ipack

…

irqchip

irqchip: Build IMX_MU_MSI only on ARM

2025-08-15 12:09:03 +02:00

isdn

mISDN: Fix memory leak in dsp_hwec_enable()

2025-09-09 18:56:22 +02:00

leds

leds: flash: leds-qcom-flash: Fix registry access after re-bind

2025-08-28 16:28:40 +02:00

macintosh

macintosh/therm_windtunnel: fix module unload.

2024-08-03 08:54:02 +02:00

mailbox

mailbox: Not protect module_put with spin_lock_irqsave

2025-07-06 11:00:05 +02:00

mcb

mcb: fix a double free bug in chameleon_parse_gdd()

2025-05-02 07:50:47 +02:00

md

dm-table: fix checking for rq stackable devices

2025-08-28 16:28:28 +02:00

media

media: i2c: imx214: Fix link frequency validation

2025-09-19 16:32:01 +02:00

memory

memory: omap-gpmc: drop no compatible check

2025-04-10 14:37:38 +02:00

memstick

memstick: Fix deadlock by moving removing flag earlier

2025-08-28 16:28:43 +02:00

message

scsi: fusion: Remove unused variable 'rc'

2024-12-09 10:32:18 +01:00

mfd

mfd: axp20x: Set explicit ID for AXP313 regulator

2025-08-28 16:28:25 +02:00

misc

misc: rtsx: usb: Ensure mmc child device is active when card is present

2025-08-28 16:28:31 +02:00

mmc

mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER

2025-08-28 16:28:46 +02:00

most

most: core: Drop device reference after usage in get_channel()

2025-08-28 16:28:45 +02:00

mtd

mtd: rawnand: stm32_fmc2: fix ECC overwrite

2025-09-19 16:32:03 +02:00

mux

…

net

net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups

2025-09-19 16:32:03 +02:00

nfc

nfc: pn533: Add poll mod list filling check

2024-09-04 13:28:28 +02:00

ntb

ntb_hw_amd: Add NTB PCI ID for new gen CPU

2025-05-02 07:50:56 +02:00

nubus

…

nvdimm

libnvdimm/labels: Fix divide error in nd_label_data_init()

2025-06-04 14:41:56 +02:00

nvme

nvme-pci: try function level reset on init failure

2025-08-28 16:28:14 +02:00

nvmem

nvmem: layouts: u-boot-env: remove crc32 endianness conversion

2025-07-24 08:53:22 +02:00

of

of: dynamic: Fix use after free in of_changeset_add_prop_helper()

2025-09-04 15:30:18 +02:00

opp

OPP: OF: Fix an OF node leak in _opp_add_static_v2()

2025-02-08 09:51:55 +01:00

parisc

Revert "change alloc_pages name in dma_map_ops to avoid name conflicts"

2024-09-04 13:28:24 +02:00

parport

parport: Proper fix for array out-of-bounds access

2024-10-22 15:46:33 +02:00

pci

PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads

2025-09-09 18:56:29 +02:00

pcmcia

pcmcia: Add error handling for add_interval() in do_validate_mem()

2025-09-09 18:56:32 +02:00

peci

…

perf

perf/cxlpmu: Remove unintended newline from IRQ name format string

2025-08-28 16:28:21 +02:00

phy

phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence

2025-08-28 16:28:36 +02:00

pinctrl

pinctrl: STMFX: add missing HAS_IOMEM dependency

2025-09-04 15:30:18 +02:00

platform

platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list

2025-09-09 18:56:27 +02:00

pmdomain

imx8m-blk-ctrl: set ISI panic write hurry level

2025-08-28 16:28:19 +02:00

pnp

…

power

power: supply: qcom_battmgr: Add lithium-polymer entry

2025-08-28 16:28:27 +02:00

powercap

powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()

2025-08-15 12:08:42 +02:00

pps

pps: clients: gpio: fix interrupt handling order in remove path

2025-08-28 16:28:18 +02:00

ps3

…

ptp

ptp: Use ratelimite for freerun error message

2025-08-28 16:28:24 +02:00

pwm

pwm: mediatek: Fix duty and period setting

2025-08-28 16:28:36 +02:00

rapidio

drivers/rapidio/rio_cm.c: prevent possible heap overwrite

2025-06-27 11:08:58 +01:00

ras

…

regulator

regulator: core: fix NULL dereference on unbind due to stale coupling data

2025-08-01 09:47:28 +01:00

remoteproc

remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU

2025-08-28 16:28:16 +02:00

reset

reset: brcmstb: Enable reset drivers for ARCH_BCM2835

2025-08-28 16:28:18 +02:00

rpmsg

rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()

2025-06-19 15:28:27 +02:00

rtc

rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe

2025-08-28 16:28:30 +02:00

s390

s390/sclp: Fix SCCB present check

2025-08-28 16:28:43 +02:00

sbus

…

scsi

scsi: lpfc: Fix buffer free/clear order in deferred receive path

2025-09-09 18:56:27 +02:00

sh

sh: intc: Fix use-after-free bug in register_intc_controller()

2024-12-09 10:33:00 +01:00

siox

…

slimbus

slimbus: messaging: Free transaction ID in delayed interrupt scenario

2025-03-13 12:58:37 +01:00

soc

soc: qcom: mdt_loader: Deal with zero e_shentsize

2025-09-09 18:56:27 +02:00

soundwire

soundwire: Move handle_nested_irq outside of sdw_dev_lock

2025-08-28 16:28:28 +02:00

spi

spi: fsl-qspi: Fix double cleanup in probe error path

2025-09-09 18:56:35 +02:00

spmi

spmi: hisi-spmi-controller: Do not override device identifier

2024-06-21 14:38:40 +02:00

ssb

ssb: Fix division by zero issue in ssb_calc_clock_rate

2024-08-29 17:33:22 +02:00

staging

media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()

2025-08-28 16:28:37 +02:00

target

scsi: target: core: Generate correct identifiers for PR OUT transport IDs

2025-08-28 16:28:29 +02:00

tc

…

tee

tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"

2025-09-09 18:56:20 +02:00

thermal

thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold

2025-09-09 18:56:29 +02:00

thunderbolt

thunderbolt: Fix copy+paste error in match_service_id()

2025-08-28 16:28:31 +02:00

tty

vt: defkeymap: Map keycodes above 127 to K_HOLE

2025-08-28 16:28:33 +02:00

ufs

scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE

2025-08-28 16:28:44 +02:00

uio

uio_hv_generic: Align ring size to system page

2025-07-06 11:00:09 +02:00

usb

usb: typec: maxim_contaminant: disable low power mode when reading comparator values

2025-08-28 16:28:47 +02:00

vdpa

vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines

2025-06-04 14:42:05 +02:00

vfio

vfio/mlx5: fix possible overflow in tracking max message size

2025-08-28 16:28:29 +02:00

vhost

vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()

2025-09-04 15:30:20 +02:00

video

Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"

2025-08-28 16:28:33 +02:00

virt

fix locking in efi_secret_unlink()

2025-08-28 16:28:15 +02:00

virtio

virtio_ring: Fix error reporting in virtqueue_resize

2025-08-01 09:47:28 +01:00

vlynq

…

w1

nvmem: add explicit config option to read old syntax fixed OF cells

2024-05-17 12:01:55 +02:00

watchdog

watchdog: iTCO_wdt: Report error if timeout configuration fails

2025-08-28 16:28:26 +02:00

xen

xen/gntdev: remove struct gntdev_copy_batch from stack

2025-08-15 12:08:47 +02:00

zorro

…

Kconfig

…

Makefile

…