shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-07 19:30:30 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
fc468f8031823ee64685ba2159c48a24d424d921
linux/drivers
History
Schspa Shi 18951cdc95 vfio: Clear the caps->buf to NULL after free 
[ Upstream commit 6641085e8d ]

On buffer resize failure, vfio_info_cap_add() will free the buffer,
report zero for the size, and return -ENOMEM.  As additional
hardening, also clear the buffer pointer to prevent any chance of a
double free.

Signed-off-by: Schspa Shi <schspa@gmail.com>
Reviewed-by: Cornelia Huck <cohuck@redhat.com>
Link: https://lore.kernel.org/r/20220629022948.55608-1-schspa@gmail.com
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-06-29 09:26:49 +09:00
..
accessibility
…
acpi
ACPI: video: Shortening quirk list by identifying Clevo by board_name only
2023-06-29 09:26:46 +09:00
amba
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2023-05-16 12:02:23 +09:00
amlogic
ODROID-G12: Fix flicking with LG 1080p monitors.
2023-05-31 10:39:07 +09:00
android
binder: use wake_up_pollfree()
2023-05-16 12:22:16 +09:00
ata
ata: libata-eh: Add missing command name
2023-06-29 09:26:48 +09:00
atm
atm: idt77252: fix use-after-free bugs caused by tst_timer
2023-06-29 09:26:48 +09:00
auxdisplay
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
2023-05-16 12:15:31 +09:00
base
x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
2023-06-29 09:26:26 +09:00
bcma
bcma: Fix memory leak for internally-handled cores
2023-05-16 11:44:50 +09:00
block
xen/blkfront: force data bouncing when backend is untrusted
2023-06-29 09:26:41 +09:00
bluetooth
Bluetooth: bfusb: fix division by zero in send path
2023-05-16 12:30:31 +09:00
bus
bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
2023-06-29 09:26:12 +09:00
cdrom
cdrom: gdrom: initialize global variable at init time
2023-05-16 11:05:40 +09:00
char
Revert "Revert "char/random: silence a lockdep splat with printk()""
2023-06-29 09:26:44 +09:00
clk
clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()
2023-06-29 09:26:12 +09:00
clocksource
clocksource/drivers/sp804: Avoid error on multiple instances
2023-06-29 09:26:24 +09:00
connector
…
cpufreq
cpufreq: pmac32-cpufreq: Fix refcount leak bug
2023-06-29 09:26:43 +09:00
cpuidle
cpuidle: Fix kobject memory leaks in error paths
2023-05-16 12:14:36 +09:00
crypto
crypto: ccp - ccp_dmaengine_unregister release dma channels
2023-06-29 09:26:01 +09:00
dax
…
dca
…
devfreq
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
2023-05-16 09:14:54 +09:00
dio
…
dma
dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
2023-06-29 09:26:42 +09:00
dma-buf
…
edac
EDAC: Fix calculation of returned address and next offset in edac_align_ptr()
2023-05-16 12:43:19 +09:00
eisa
…
extcon
extcon: max8997: Add missing modalias string
2023-05-16 11:24:53 +09:00
firewire
firewire: core: extend card->lock in fw_core_handle_bus_reset
2023-06-29 09:26:13 +09:00
firmware
firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
2023-06-29 09:26:23 +09:00
fmc
…
fpga
…
gpio
MIPS: Remove repetitive increase irq_err_count
2023-06-29 09:26:39 +09:00
gpu
drm/nouveau: fix another off-by-one in nvbios_addr
2023-06-29 09:26:47 +09:00
hardkernel
…
hid
HID: hid-led: fix maximum brightness for Dream Cheeky
2023-06-29 09:26:19 +09:00
hsi
HSI: core: Fix return freed object in hsi_new_client
2023-05-16 12:32:14 +09:00
hv
random: remove unused irq_flags argument from add_interrupt_randomness()
2023-06-29 09:26:30 +09:00
hwmon
hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails
2023-06-29 09:26:41 +09:00
hwspinlock
…
hwtracing
coresight: Fix TRCCONFIGR.QE sysfs interface
2023-06-29 09:25:59 +09:00
i2c
i2c: cadence: Change large transfer count reset logic to be unconditional
2023-06-29 09:26:44 +09:00
ide
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2023-05-16 09:04:57 +09:00
idle
…
iio
iio: trigger: sysfs: fix use-after-free on remove
2023-06-29 09:26:39 +09:00
infiniband
RDMA/rxe: Generate a completion for unsupported/invalid opcode
2023-06-29 09:26:22 +09:00
input
Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
2023-06-29 09:26:25 +09:00
iommu
iommu/vt-d: Fix PCI bus rescan device hot add
2023-06-29 09:26:42 +09:00
ipack
ipack: ipoctal: fix module reference leak
2023-05-16 11:53:57 +09:00
irqchip
irqchip/tegra: Fix overflow implicit truncation warnings
2023-06-29 09:26:49 +09:00
isdn
mISDN: change function names to avoid conflicts
2023-05-16 12:30:26 +09:00
leds
leds: ktd2692: Fix an error handling path
2023-05-16 11:24:56 +09:00
lguest
…
lightnvm
lightnvm: disable the subsystem
2023-06-29 09:26:11 +09:00
macintosh
macintosh/adb: fix oob read in do_adb_query() function
2023-06-29 09:26:46 +09:00
mailbox
…
mcb
mcb: fix error handling in mcb_alloc_bus()
2023-05-16 11:53:10 +09:00
md
drivers:md:fix a potential use-after-free bug
2023-06-29 09:26:49 +09:00
media
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
2023-06-29 09:26:20 +09:00
memory
memory: emif: check the pointer temp in get_device_details()
2023-06-29 09:26:02 +09:00
memstick
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2023-05-16 12:14:44 +09:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2023-05-16 09:45:15 +09:00
mfd
misc: rtsx_usb: set return value in rsp_buf alloc err path
2023-06-29 09:26:44 +09:00
misc
cxl: Fix a memory leak in an error handling path
2023-06-29 09:26:49 +09:00
mmc
mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()
2023-06-29 09:26:16 +09:00
mtd
mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
2023-06-29 09:26:25 +09:00
net
fec: Fix timer capture timing in fec_ptp_enable_pps()
2023-06-29 09:26:49 +09:00
nfc
NFC: nxp-nci: don't print header length mismatch on i2c error
2023-06-29 09:26:43 +09:00
ntb
NTB: hw: amd: fix an issue about leak system resources
2023-05-16 09:39:21 +09:00
nubus
…
nvdimm
libnvdimm/dimm: Avoid race between probe and available_slots_show()
2023-05-16 10:38:48 +09:00
nvme
nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
2023-06-29 09:26:18 +09:00
nvmem
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2023-05-16 12:00:53 +09:00
of
fdt: Update CRC check for rng-seed
2023-06-29 09:26:40 +09:00
oprofile
…
parisc
parisc: Fix sglist access in ccio-dma.c
2023-05-16 12:42:44 +09:00
parport
parport: remove non-zero check on count
2023-05-16 11:46:21 +09:00
pci
PCI: qcom: Fix unbalanced PHY init on probe errors
2023-06-29 09:26:25 +09:00
pcmcia
pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
2023-06-29 09:26:22 +09:00
perf
…
phy
phy: samsung: exynos5250-sata: fix missing device put in probe error paths
2023-06-29 09:26:12 +09:00
pinctrl
pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
2023-06-29 09:26:48 +09:00
platform
platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
2023-06-29 09:26:10 +09:00
pnp
…
power
power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
2023-06-29 09:26:44 +09:00
powercap
powercap: restrict energy meter to root access
2023-05-16 09:46:33 +09:00
pps
…
ps3
powerpc/ps3: use dma_mapping_error()
2023-05-16 09:58:13 +09:00
ptp
ptp: replace snprintf with sysfs_emit
2023-06-29 09:26:07 +09:00
pwm
pwm: lp3943: Fix duty calculation in case period was clamped
2023-06-29 09:26:22 +09:00
rapidio
rapidio: handle create_workqueue() failure
2023-05-16 11:05:25 +09:00
ras
…
regulator
regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
2023-06-29 09:26:20 +09:00
remoteproc
remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
2023-06-29 09:26:04 +09:00
reset
Revert "This driver allows GPIO lines to be used as reset signals."
2023-05-16 17:15:02 +09:00
rpmsg
rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
2023-06-29 09:26:22 +09:00
rtc
rtc: mt6397: check return value after calling platform_get_resource()
2023-06-29 09:26:23 +09:00
s390
scsi: zfcp: Fix missing auto port scan and thus missing target ports
2023-06-29 09:26:47 +09:00
sbus
…
scsi
scsi: sg: Allow waiting for commands to complete on removed device
2023-06-29 09:26:48 +09:00
sfi
…
sh
maple: fix wrong return value of maple_bus_init().
2023-05-16 12:16:16 +09:00
sn
…
soc
soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
2023-06-29 09:26:20 +09:00
spi
spi: img-spfi: Fix pm_runtime_get_sync() error checking
2023-06-29 09:26:19 +09:00
spmi
…
ssb
ssb: sdio: Don't overwrite const buffer if block_write fails
2023-05-16 11:22:54 +09:00
staging
ion: Make user_ion_handle_put_nolock() a void function
2023-06-29 09:26:45 +09:00
target
scsi: target: iscsi: Make sure the np under each tpg is unique
2023-05-16 12:41:58 +09:00
tc
…
tee
UPSTREAM: tee: shm: fix use-after-free via temporarily dropped reference
2023-05-16 09:46:44 +09:00
thermal
thermal: int340x: Increase bitmap size
2023-06-29 09:26:00 +09:00
thunderbolt
…
tty
tty: serial: Fix refcount leak bug in ucc_uart.c
2023-06-29 09:26:49 +09:00
uio
uio_pdrv_genirq: fix use without device tree and no interrupt
2023-05-16 08:31:00 +09:00
usb
gadgetfs: ep_io - wait until IRQ finishes
2023-06-29 09:26:49 +09:00
uwb
…
vfio
vfio: Clear the caps->buf to NULL after free
2023-06-29 09:26:49 +09:00
vhost
vringh: Fix loop descriptors check in the indirect cases
2023-06-29 09:26:24 +09:00
video
video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove()
2023-06-29 09:26:23 +09:00
virt
drivers/virt/fsl_hypervisor: Fix error handling path
2023-05-16 09:38:07 +09:00
virtio
virtio_mmio: Restore guest page size on resume
2023-06-29 09:26:43 +09:00
vlynq
…
vme
…
w1
w1: w1_therm: fixes w1_seq for ds28ea00 sensors
2023-06-29 09:26:07 +09:00
watchdog
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
2023-05-16 12:15:35 +09:00
xen
xen/xenbus: fix return type in xenbus_file_read()
2023-06-29 09:26:48 +09:00
zorro
…
Kconfig
…
Makefile
…