shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-06 19:08:57 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
ae730deded66150204c494282969bfa98dc3ae67
linux/drivers
History
Karol Przybylski ae730deded HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check 
[ Upstream commit 50420d7c79c37a3efe4010ff9b1bb14bc61ebccf ]

syzbot has found a type mismatch between a USB pipe and the transfer
endpoint, which is triggered by the hid-thrustmaster driver[1].
There is a number of similar, already fixed issues [2].
In this case as in others, implementing check for endpoint type fixes the issue.

[1] https://syzkaller.appspot.com/bug?extid=040e8b3db6a96908d470
[2] https://syzkaller.appspot.com/bug?extid=348331f63b034f89b622

Fixes: c49c336378 ("HID: support for initialization of some Thrustmaster wheels")
Reported-by: syzbot+040e8b3db6a96908d470@syzkaller.appspotmail.com
Tested-by: syzbot+040e8b3db6a96908d470@syzkaller.appspotmail.com
Signed-off-by: Karol Przybylski <karprzy7@gmail.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-02-08 09:51:56 +01:00
..
accel
accel/qaic: Fix the for loop used to walk SG table
2024-11-01 01:58:21 +01:00
accessibility
…
acpi
ACPI: fan: cleanup resources in the error path of .probe()
2025-02-08 09:51:52 +01:00
amba
…
android
binder: fix UAF caused by offsets overwrite
2024-09-12 11:11:41 +02:00
ata
ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
2025-02-01 18:37:52 +01:00
atm
atm: idt77252: prevent use after free in dequeue_rx()
2024-08-29 17:33:18 +02:00
auxdisplay
auxdisplay: ht16k33: Drop reference after LED registration
2024-08-03 08:54:39 +02:00
base
topology: Keep the cpumask unchanged when printing cpumap
2025-01-17 13:36:20 +01:00
bcma
…
block
nbd: don't allow reconnect after disconnect
2025-02-08 09:51:42 +01:00
bluetooth
Bluetooth: btnxpuart: Fix driver sending truncated data
2025-01-17 13:36:14 +01:00
bus
of: remove internal arguments from of_property_for_each_u32()
2025-02-08 09:51:51 +01:00
cache
…
cdrom
cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
2024-11-01 01:58:25 +01:00
cdx
…
char
ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
2025-02-08 09:51:55 +01:00
clk
clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
2025-02-08 09:51:56 +01:00
clocksource
of: remove internal arguments from of_property_for_each_u32()
2025-02-08 09:51:51 +01:00
comedi
comedi: Flush partial mappings in error case
2024-12-09 10:32:44 +01:00
connector
…
counter
counter: ti-ecap-capture: Add check for clk_enable()
2024-12-09 10:32:37 +01:00
cpufreq
cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
2025-02-08 09:51:54 +01:00
cpuidle
cpuidle: riscv-sbi: fix device node release in early exit of for_each_possible_cpu
2025-01-17 13:36:16 +01:00
crypto
crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
2024-12-09 10:31:50 +01:00
cxl
cxl/region: Fix region creation for greater than x2 switches
2024-12-27 13:58:46 +01:00
dax
dax: delete a stale directory pmem
2024-12-09 10:32:21 +01:00
dca
…
devfreq
…
dio
…
dma
dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
2025-01-02 10:32:03 +01:00
dma-buf
udmabuf: also check for F_SEAL_FUTURE_WRITE
2024-12-27 13:58:56 +01:00
edac
EDAC/amd64: Simplify ECC check on unified memory controllers
2024-12-27 13:58:50 +01:00
eisa
…
extcon
…
firewire
firewire: core: correct range of block for case of switch statement
2024-10-04 16:29:28 +02:00
firmware
efi/libstub: Free correct pointer on failure
2024-12-09 10:33:03 +01:00
fpga
…
fsi
…
gnss
…
gpio
gpio: pca953x: log an error when failing to get the reset GPIO
2025-02-08 09:51:54 +01:00
gpu
drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
2025-02-08 09:51:48 +01:00
greybus
…
hid
HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
2025-02-08 09:51:56 +01:00
hsi
…
hte
…
hv
Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
2024-12-27 13:58:54 +01:00
hwmon
hwmon: (drivetemp) Set scsi command timeout to 10s
2025-02-01 18:37:51 +01:00
hwspinlock
hwspinlock: Introduce hwspin_lock_bust()
2024-09-08 07:54:43 +02:00
hwtracing
coresight: tmc: sg: Do not leak sg_table
2024-10-04 16:29:40 +02:00
i2c
i2c: atr: Fix client detach
2025-01-23 17:21:15 +01:00
i3c
i3c: master: svc: fix possible assignment of the same address to two devices
2024-12-14 20:00:23 +01:00
idle
…
iio
of: remove internal arguments from of_property_for_each_u32()
2025-02-08 09:51:51 +01:00
infiniband
RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
2025-02-01 18:37:52 +01:00
input
Input: xpad - add support for wooting two he (arm)
2025-02-01 18:37:56 +01:00
interconnect
interconnect: icc-clk: Add missed num_nodes initialization
2024-10-04 16:29:40 +02:00
iommu
iommu/arm-smmu: Defer probe of clients after smmu device bound
2024-12-14 19:59:44 +01:00
ipack
…
irqchip
of: remove internal arguments from of_property_for_each_u32()
2025-02-08 09:51:51 +01:00
isdn
mISDN: fix MISDN_TIME_STAMP handling
2024-08-19 06:04:28 +02:00
leds
leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
2025-02-08 09:51:52 +01:00
macintosh
macintosh/therm_windtunnel: fix module unload.
2024-08-03 08:54:02 +02:00
mailbox
mailbox: pcc: Check before sending MCTP PCC response ACK
2025-01-09 13:31:45 +01:00
mcb
…
md
dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
2025-01-17 13:36:19 +01:00
media
media: uvcvideo: Force UVC version to 1.0a for 0408:4033
2025-01-09 13:31:41 +01:00
memory
memory: tegra186-emc: drop unused to_tegra186_emc()
2024-10-10 11:57:44 +02:00
memstick
…
message
scsi: fusion: Remove unused variable 'rc'
2024-12-09 10:32:18 +01:00
mfd
of: remove internal arguments from of_property_for_each_u32()
2025-02-08 09:51:51 +01:00
misc
misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config
2025-01-17 13:36:21 +01:00
mmc
mmc: sdhci-msm: fix crypto key eviction
2025-01-09 13:31:54 +01:00
most
…
mtd
Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
2025-01-23 17:21:12 +01:00
mux
…
net
wifi: ath12k: fix tx power, max reg power update to firmware
2025-02-08 09:51:56 +01:00
nfc
nfc: pn533: Add poll mod list filling check
2024-09-04 13:28:28 +02:00
ntb
ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
2024-10-17 15:24:18 +02:00
nubus
…
nvdimm
nvdimm: rectify the illogical code within nd_dax_probe()
2024-12-14 20:00:13 +01:00
nvme
nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
2025-02-08 09:51:43 +01:00
nvmem
nvmem: u-boot-env: error if NVMEM device is too small
2024-09-18 19:24:04 +02:00
of
of/unittest: Add test that of_address_to_resource() fails on non-translatable address
2025-02-01 18:37:51 +01:00
opp
OPP: OF: Fix an OF node leak in _opp_add_static_v2()
2025-02-08 09:51:55 +01:00
parisc
Revert "change alloc_pages name in dma_map_ops to avoid name conflicts"
2024-09-04 13:28:24 +02:00
parport
parport: Proper fix for array out-of-bounds access
2024-10-22 15:46:33 +02:00
pci
Revert "PCI: Use preserve_config in place of pci_flags"
2025-01-23 17:21:18 +01:00
pcmcia
pcmcia: Use resource_size function on resource object
2024-09-12 11:11:31 +02:00
peci
…
perf
perf/arm-cmn: Ensure port and device id bits are set properly
2024-12-09 10:32:57 +01:00
phy
phy: rockchip: naneng-combphy: fix phy reset
2025-01-02 10:32:02 +01:00
pinctrl
of: remove internal arguments from of_property_for_each_u32()
2025-02-08 09:51:51 +01:00
platform
platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
2025-01-17 13:36:16 +01:00
pmdomain
pmdomain: imx8mp-blk-ctrl: add missing loop break condition
2025-01-23 17:21:17 +01:00
pnp
…
power
power: supply: gpio-charger: Fix set charge current limits
2025-01-02 10:32:10 +01:00
powercap
powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
2024-11-01 01:58:31 +01:00
pps
pps: add an error check in parport_attach
2024-10-04 16:29:58 +02:00
ps3
…
ptp
ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
2024-12-19 18:11:28 +01:00
pwm
pwm: stm32-lp: Add check for clk_enable()
2025-02-08 09:51:53 +01:00
rapidio
…
ras
…
regulator
regulator: of: Implement the unwind path of of_regulator_match()
2025-02-08 09:51:55 +01:00
remoteproc
remoteproc: qcom: pas: enable SAR2130P audio DSP support
2025-01-09 13:31:45 +01:00
reset
reset: k210: fix OF node leak in probe() error path
2024-10-04 16:29:04 +02:00
rpmsg
rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
2024-12-09 10:32:29 +01:00
rtc
rtc: cmos: avoid taking rtc_lock for extended period of time
2024-12-14 20:00:16 +01:00
s390
net/smc: compatible with 128-bits extended GID of virtual ISM device
2024-12-14 19:59:36 +01:00
sbus
…
scsi
scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
2025-02-01 18:37:55 +01:00
sh
sh: intc: Fix use-after-free bug in register_intc_controller()
2024-12-09 10:33:00 +01:00
siox
…
slimbus
…
soc
soc: imx8m: Probe the SoC driver as platform driver
2024-12-14 20:00:00 +01:00
soundwire
soundwire: cadence: re-check Peripheral status with delayed_work
2024-10-17 15:24:18 +02:00
spi
spi: zynq-qspi: Add check for clk_enable()
2025-02-08 09:51:50 +01:00
spmi
…
ssb
ssb: Fix division by zero issue in ssb_calc_clock_rate
2024-08-29 17:33:22 +02:00
staging
staging: iio: ad9832: Correct phase range check
2025-01-17 13:36:20 +01:00
target
scsi: target: core: Fix null-ptr-deref in target_alloc_device()
2024-11-01 01:58:24 +01:00
tc
…
tee
…
thermal
thermal: of: fix OF node leak in of_thermal_zone_find()
2025-01-17 13:36:18 +01:00
thunderbolt
thunderbolt: Don't display nvm_version unless upgrade supported
2025-01-09 13:31:49 +01:00
tty
of: remove internal arguments from of_property_for_each_u32()
2025-02-08 09:51:51 +01:00
ufs
scsi: ufs: core: Honor runtime/system PM levels if set by host controller drivers
2025-01-23 17:21:13 +01:00
uio
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
2024-09-12 11:11:41 +02:00
usb
of: remove internal arguments from of_property_for_each_u32()
2025-02-08 09:51:51 +01:00
vdpa
vdpa/mlx5: Fix suboptimal range on iotlb iteration
2024-12-09 10:32:30 +01:00
vfio
vfio/platform: check the bounds of read/write syscalls
2025-02-01 18:37:55 +01:00
vhost
vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
2024-10-10 11:58:08 +02:00
video
fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
2024-12-09 10:32:21 +01:00
virt
…
virtio
virtio_ring: fix KMSAN error for premapped mode
2024-09-12 11:11:36 +02:00
vlynq
…
w1
…
watchdog
watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
2025-01-09 13:31:50 +01:00
xen
xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
2024-12-09 10:32:39 +01:00
zorro
…
Kconfig
…
Makefile
…