shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-04-02 03:03:00 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
8fbdf8b34edc412dc7d8e2e4957c8ea1625ff8a2
linux/drivers
History
Dan Carpenter 8fbdf8b34e ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() 
commit 260a9ad944 upstream.

The "ext->key_len" is a u16 that comes from the user.  If it's over
SCM_KEY_LEN (32) that could lead to memory corruption.

Fixes: e0d369d1d9 ("[PATCH] ieee82011: Added WE-18 support to default wireless extension handler")
Cc: stable@vger.kernel.org
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Stanislav Yakovlev <stas.yakovlev@gmail.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/YHaoA1i+8uT4ir4h@mwanda
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-05-16 11:01:39 +09:00
..
accessibility
…
acpi
ACPI: custom_method: fix a possible memory leak
2023-05-16 10:53:37 +09:00
amba
amba: Fix resource leak for drivers without .remove
2023-05-16 10:37:49 +09:00
amlogic
tee: disable by default
2023-05-12 16:27:16 +09:00
android
UPSTREAM: binder: fix incorrect cmd to binder_stat_br
2023-05-16 09:46:39 +09:00
ata
ata: ahci_brcm: Add back regulators management
2023-05-16 10:37:22 +09:00
atm
atm: idt77252: fix null-ptr-dereference
2023-05-16 10:48:48 +09:00
auxdisplay
auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE
2018-02-13 12:35:55 +01:00
base
Revert "device property: Keep secondary firmware node secondary by type"
2023-05-16 10:25:30 +09:00
bcma
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
2023-05-15 16:46:34 +09:00
block
xen-blkback: don't leak persistent grants from xen_blkbk_map()
2023-05-16 10:49:35 +09:00
bluetooth
Bluetooth: btusb: fix PM leak in error case of setup
2023-05-15 16:30:44 +09:00
bus
bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
2023-05-16 10:48:59 +09:00
cdrom
cdrom: respect device capabilities during opening action
2023-05-15 16:21:24 +09:00
char
parisc: parisc-agp requires SBA IOMMU driver
2023-05-16 10:51:36 +09:00
clk
clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
2023-05-16 10:54:13 +09:00
clocksource
clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
2023-05-16 10:37:41 +09:00
connector
…
cpufreq
cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()
2023-05-16 10:26:09 +09:00
cpuidle
cpuidle: Fix three reference count leaks
2023-05-15 17:34:06 +09:00
crypto
crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
2023-05-16 09:57:11 +09:00
dax
device-dax: implement ->split() to catch invalid munmap attempts
2018-02-28 10:18:33 +01:00
dca
…
devfreq
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
2023-05-16 09:14:54 +09:00
dio
…
dma
dmaengine: dw: Make it dependent to HAS_IOMEM
2023-05-16 10:52:37 +09:00
dma-buf
dma-buf: Fix memory leak in sync_file_merge()
2023-05-15 16:17:55 +09:00
edac
EDAC/i5100: Fix error handling order in i5100_init_one()
2023-05-16 09:37:32 +09:00
eisa
…
extcon
extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged
2023-05-16 10:54:04 +09:00
firewire
firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
2023-05-16 10:50:08 +09:00
firmware
efi: Make it possible to disable efivar_ssdt entirely
2023-05-16 08:29:32 +09:00
fmc
…
fpga
…
gpio
gpio: pcf857x: Fix missing first interrupt
2023-05-16 10:38:52 +09:00
gpu
drm/amdgpu: fix NULL pointer dereference
2023-05-16 10:54:25 +09:00
hardkernel
ODROID-G12: Make hid-multitouch and dwav-usb-mt driver as mouldes.
2022-03-15 09:20:56 +09:00
hid
HID: alps: fix error return code in alps_input_configured()
2023-05-16 10:53:12 +09:00
hsi
HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
2023-05-16 09:57:28 +09:00
hv
Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
2023-05-16 09:13:23 +09:00
hwmon
hwmon: (lm90) Fix max6658 sporadic wrong temperature reading
2023-05-16 10:47:45 +09:00
hwspinlock
…
hwtracing
intel_th: Consistency and off-by-one fix
2023-05-16 10:53:58 +09:00
i2c
i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition
2023-05-16 10:38:15 +09:00
ide
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2023-05-16 09:04:57 +09:00
idle
x86/cpu: Sanitize FAM6_ATOM naming
2023-05-15 12:46:28 +09:00
iio
iio: hid-sensor-prox: Fix scale not correct issue
2023-05-16 10:51:19 +09:00
infiniband
RDMA/cxgb4: check for ipv6 address properly while destroying listener
2023-05-16 10:51:51 +09:00
input
Input: i8042 - fix Pegatron C15B ID entry
2023-05-16 10:52:55 +09:00
iommu
iommu/amd: Fix sleeping in atomic in increase_address_space()
2023-05-16 10:46:05 +09:00
ipack
…
irqchip
irqchip/alpine-msi: Fix freeing of interrupts on allocation error path
2023-05-16 09:58:09 +09:00
isdn
mISDN: fix crash in fritzpci
2023-05-16 10:50:24 +09:00
leds
leds: trigger: fix potential deadlock with libata
2023-05-16 10:33:24 +09:00
lguest
…
lightnvm
…
macintosh
drivers/macintosh: Fix memleak in windfarm_pm112 driver
2023-05-15 17:34:39 +09:00
mailbox
mailbox: handle failed named mailbox channel request
2023-05-15 14:08:07 +09:00
mcb
…
md
md: md_open returns -EBUSY when entering racing area
2023-05-16 11:01:38 +09:00
media
media: dvbdev: Fix memory leak in dvb_media_device_free()
2023-05-16 10:54:46 +09:00
memory
memory: emif: Remove bogus debugfs error handling
2023-05-16 09:44:58 +09:00
memstick
memstick: r592: Fix error return in r592_probe()
2023-05-16 09:57:42 +09:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2023-05-16 09:45:15 +09:00
mfd
mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
2023-05-16 10:37:53 +09:00
misc
misc: vmw_vmci: explicitly initialize vmci_datagram payload
2023-05-16 10:55:03 +09:00
mmc
mmc: core: Set read only for SD cards with permanent write protect bit
2023-05-16 10:53:42 +09:00
mtd
mtd: spi-nor: hisi-sfc: Put child node np on error path
2023-05-16 10:38:44 +09:00
net
ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
2023-05-16 11:01:39 +09:00
nfc
nfc: s3fwrn5: Release the nfc firmware
2023-05-16 09:58:11 +09:00
ntb
NTB: hw: amd: fix an issue about leak system resources
2023-05-16 09:39:21 +09:00
nubus
…
nvdimm
libnvdimm/dimm: Avoid race between probe and available_slots_show()
2023-05-16 10:38:48 +09:00
nvme
nvmet: don't check iosqes,iocqes for discovery controllers
2023-05-16 10:48:06 +09:00
nvmem
nvmem: qfprom: remove incorrect write support
2023-05-15 17:31:34 +09:00
of
of/fdt: Make sure no-map does not remove already reserved regions
2023-05-16 10:37:38 +09:00
oprofile
…
parisc
parisc: mask out enable and reserved bits from sba imask
2023-05-16 08:47:32 +09:00
parport
parport: load lowlevel driver if ports not found
2023-05-15 16:19:36 +09:00
pci
PCI: PM: Do not read power state in pci_enable_device_flags()
2023-05-16 10:53:52 +09:00
pcmcia
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
2023-05-15 09:18:55 +09:00
perf
drivers/perf: arm_pmu: Fix failure path in PM notifier
2023-05-15 14:09:37 +09:00
phy
phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
2023-05-16 10:53:59 +09:00
pinctrl
pinctrl: rockchip: fix restore error in resume
2023-05-16 10:50:05 +09:00
platform
platform/x86: thinkpad_acpi: Correct thermal sensor allocation
2023-05-16 10:53:33 +09:00
pnp
…
power
power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove()
2023-05-16 10:54:16 +09:00
powercap
powercap: restrict energy meter to root access
2023-05-16 09:46:33 +09:00
pps
drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
2023-05-15 14:08:51 +09:00
ps3
powerpc/ps3: use dma_mapping_error()
2023-05-16 09:58:13 +09:00
ptp
ptp: free ptp device pin descriptors properly
2023-05-15 17:27:25 +09:00
pwm
pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()
2023-05-16 10:38:03 +09:00
rapidio
rapidio: fix the missed put_device() for rio_mport_add_riodev
2023-05-16 09:38:59 +09:00
ras
…
regulator
regulator: axp20x: Fix reference cout leak
2023-05-16 10:37:42 +09:00
remoteproc
remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load
2023-05-16 10:35:30 +09:00
reset
reset: Fix potential use-after-free in __of_reset_control_get()
2023-05-15 15:12:21 +09:00
rpmsg
rpmsg: smd: fix memory leak on channel create
2023-05-15 09:23:11 +09:00
rtc
rtc: rx8010: don't modify the global rtc ops
2023-05-16 09:45:43 +09:00
s390
s390/dasd: fix hanging DASD driver unbind
2023-05-16 10:46:48 +09:00
sbus
drivers/sbus/char: add of_node_put()
2023-05-15 10:37:00 +09:00
scsi
scsi: libfc: Fix a format specifier
2023-05-16 10:54:28 +09:00
sfi
…
sh
…
sn
…
soc
soc/fsl: qbman: fix conflicting alignment attributes
2023-05-16 10:51:46 +09:00
spi
spi: omap-100k: Fix reference leak to master
2023-05-16 10:53:56 +09:00
spmi
…
ssb
ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
2023-05-15 12:59:29 +09:00
staging
staging: rtl8192e: Change state information from u16 to u8
2023-05-16 10:50:17 +09:00
target
scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
2023-05-16 10:54:01 +09:00
tc
TC: Set DMA masks for devices
2023-05-15 09:23:01 +09:00
tee
UPSTREAM: tee: shm: fix use-after-free via temporarily dropped reference
2023-05-16 09:46:44 +09:00
thermal
UPSTREAM: thermal/drivers/hisi: Remove bogus const from function return type
2023-05-16 09:46:46 +09:00
thunderbolt
thunderbolt: Use 32-bit writes when writing ring producer/consumer
2023-05-15 14:55:28 +09:00
tty
vt/consolemap: do font sum unsigned
2023-05-16 10:40:01 +09:00
uio
uio_pdrv_genirq: fix use without device tree and no interrupt
2023-05-16 08:31:00 +09:00
usb
usb: gadget/function/f_fs string table fix for multiple languages
2023-05-16 10:54:50 +09:00
uwb
uwb: hwa-rc: fix memory leak at probe
2023-05-15 08:28:33 +09:00
vfio
vfio/pci: Move dummy_resources_list init in vfio_pci_probe()
2023-05-16 10:00:16 +09:00
vhost
vhost: Fix vhost_vq_reset()
2023-05-16 10:49:47 +09:00
video
fbdev: zero-fill colormap in fbcmap.c
2023-05-16 10:53:45 +09:00
virt
drivers/virt/fsl_hypervisor: Fix error handling path
2023-05-16 09:38:07 +09:00
virtio
virtio_ring: Avoid loop when vq is broken in virtqueue_poll
2023-05-16 08:54:57 +09:00
vlynq
…
vme
vme: bridges: reduce stack usage
2023-05-15 16:59:11 +09:00
w1
w1: mxc_w1: Fix timeout resolution problem leading to bus error
2023-05-16 09:45:14 +09:00
watchdog
watchdog: qcom: Avoid context switch in restart handler
2023-05-16 09:58:19 +09:00
xen
xen/events: fix setting irq affinity
2023-05-16 10:52:23 +09:00
zorro
zorro: Set up z->dev.dma_mask for the DMA API
2018-05-30 07:50:44 +02:00
Kconfig
ODROID: sysfs: Add poweroff_trigger sysfs node.
2019-12-11 18:21:09 +09:00
Makefile
ODROID: sysfs: Add poweroff_trigger sysfs node.
2019-12-11 18:21:09 +09:00