iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
583d42400532fbd6228b0254d7c732b771e4750d
linux/drivers
History
Greg Kroah-Hartman 583d424005 mtd: properly check all write ioctls for permissions 
commit f7e6b19bc7 upstream.

When doing a "write" ioctl call, properly check that we have permissions
to do so before copying anything from userspace or anything else so we
can "fail fast".  This includes also covering the MEMWRITE ioctl which
previously missed checking for this.

Cc: Miquel Raynal <miquel.raynal@bootlin.com>
Cc: Richard Weinberger <richard@nod.at>
Cc: Vignesh Raghavendra <vigneshr@ti.com>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[rw: Fixed locking issue]
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-08-21 11:01:54 +02:00
..
accessibility
…
acpi
ACPI: sysfs: Fix pm_profile_attr type
2020-06-30 15:38:44 -04:00
amba
…
android
ANDROID: binder: synchronize_rcu() when using POLLFREE.
2019-10-07 18:53:19 +02:00
ata
ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function
2020-06-30 15:38:43 -04:00
atm
atm: eni: fix uninitialized variable warning
2020-02-05 13:05:41 +00:00
auxdisplay
…
base
regmap: debugfs: check count when read regmap file
2020-07-31 16:44:07 +02:00
bcma
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
2020-01-29 10:24:31 +01:00
block
virtio-blk: free vblk-vqs in error path of virtblk_probe()
2020-07-09 09:35:56 +02:00
bluetooth
Bluetooth: btusb: fix PM leak in error case of setup
2020-01-12 11:24:16 +01:00
bus
bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
2020-04-24 07:58:46 +02:00
cdrom
cdrom: respect device capabilities during opening action
2020-01-04 13:41:02 +01:00
char
random32: update the net random state on interrupt and activity
2020-08-21 11:01:52 +02:00
clk
clk: bcm2835: Fix return type of bcm2835_register_gate
2020-06-30 15:38:27 -04:00
clocksource
clocksource: dw_apb_timer_of: Fix missing clockevent timers
2020-06-20 10:24:14 +02:00
connector
…
cpufreq
cpufreq: powernv: Fix use-after-free
2020-04-24 07:58:59 +02:00
cpuidle
cpuidle: Fix three reference count leaks
2020-06-20 10:24:18 +02:00
crypto
crypto: ccp - Release all allocated memory if sha type is invalid
2020-08-21 11:01:47 +02:00
dax
…
dca
…
devfreq
PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency
2020-02-28 15:42:28 +01:00
dio
…
dma
dmaengine: ioat setting ioat timeout as module parameter
2020-07-31 16:44:03 +02:00
dma-buf
dma-buf: Fix memory leak in sync_file_merge()
2019-12-21 10:42:32 +01:00
edac
EDAC/amd64: Read back the scrub rate PCI register on F15h
2020-07-09 09:35:55 +02:00
eisa
…
extcon
extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()'
2020-06-30 15:38:28 -04:00
firewire
net: add annotations on hh->hh_len lockless accesses
2020-01-12 11:24:19 +01:00
firmware
efi: Make it possible to disable efivar_ssdt entirely
2020-07-09 09:35:57 +02:00
fmc
…
fpga
…
gpio
gpio: tegra: mask GPIO IRQs during IRQ shutdown
2020-06-03 08:16:34 +02:00
gpu
drm: hold gem reference until object is no longer accessed
2020-08-21 11:01:48 +02:00
hid
HID: apple: Disable Fn-key key-re-mapping on clone keyboards
2020-07-31 16:44:03 +02:00
hsi
…
hv
…
hwmon
hwmon: (emc2103) fix unable to change fan pwm1_enable attribute
2020-07-22 09:10:53 +02:00
hwspinlock
…
hwtracing
intel_th: Fix user-visible error codes
2020-04-02 17:20:25 +02:00
i2c
Revert "i2c: cadence: Fix the hold bit setting"
2020-08-21 11:01:51 +02:00
ide
ide: serverworks: potential overflow in svwks_set_pio_mode()
2020-02-28 15:42:36 +01:00
idle
…
iio
iio:health:afe4404 Fix timestamp alignment and prevent data leak.
2020-07-22 09:10:50 +02:00
infiniband
RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
2020-06-30 15:38:42 -04:00
input
Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list
2020-07-22 09:10:53 +02:00
iommu
iommu: Fix reference count leak in iommu_group_alloc.
2020-06-03 08:16:42 +02:00
ipack
…
irqchip
irqchip/gic: Atomically update affinity
2020-07-22 09:10:54 +02:00
isdn
staging: gigaset: add endpoint-type sanity check
2019-12-21 10:41:50 +01:00
leds
leds: leds-lp5562 allow firmware files up to the maximum length
2019-10-05 12:30:17 +02:00
lguest
…
lightnvm
…
macintosh
drivers/macintosh: Fix memleak in windfarm_pm112 driver
2020-06-20 10:24:21 +02:00
mailbox
mailbox: handle failed named mailbox channel request
2019-08-04 09:33:41 +02:00
mcb
…
md
bcache: fix potential deadlock problem in btree_gc_coalesce
2020-06-30 15:38:30 -04:00
media
media: rc: prevent memory leak in cx23888_ir_probe
2020-08-21 11:01:47 +02:00
memory
…
memstick
memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
2019-10-29 09:15:25 +01:00
message
scsi: mptscsih: Fix read sense data size
2020-07-22 09:10:45 +02:00
mfd
mfd: wm8994: Fix driver operation if loaded as modules
2020-06-30 15:38:22 -04:00
misc
misc: atmel-ssc: lock with mutex instead of spinlock
2020-07-22 09:10:54 +02:00
mmc
mmc: sdhci-esdhc-imx: fix the mask for tuning start point
2020-06-20 10:24:18 +02:00
mtd
mtd: properly check all write ioctls for permissions
2020-08-21 11:01:54 +02:00
net
net/mlx5e: Don't support phys switch id if not in switchdev mode
2020-08-21 11:01:53 +02:00
nfc
nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame
2020-08-21 11:01:51 +02:00
ntb
ntb: intel: fix return value for ndev_vec_mask()
2019-11-28 18:28:52 +01:00
nubus
…
nvdimm
libnvdimm/btt: Remove unnecessary code in btt_freelist_init
2020-05-27 16:42:00 +02:00
nvme
nvme: retain split access workaround for capability reads
2020-01-29 10:24:33 +01:00
nvmem
nvmem: qfprom: remove incorrect write support
2020-06-11 09:22:22 +02:00
of
of: unittest: kmemleak in of_unittest_platform_populate()
2020-04-24 07:59:10 +02:00
oprofile
…
parisc
parisc: Disable HP HSC-PCI Cards to prevent kernel crash
2019-10-05 12:30:31 +02:00
parport
parport: load lowlevel driver if ports not found
2020-01-04 13:39:55 +01:00
pci
PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge
2020-08-21 11:01:48 +02:00
pcmcia
…
perf
drivers/perf: arm_pmu: Fix failure path in PM notifier
2019-08-06 18:29:41 +02:00
phy
phy: phy-twl4030-usb: fix denied runtime access
2019-11-25 09:52:50 +01:00
pinctrl
pinctrl: amd: fix npins for uart0 in kerncz_groups
2020-07-31 16:44:01 +02:00
platform
platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
2020-05-27 16:42:00 +02:00
pnp
…
power
power: supply: smb347-charger: IRQSTAT_D is volatile
2020-06-30 15:38:24 -04:00
powercap
…
pps
drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
2019-08-04 09:33:45 +02:00
ps3
…
ptp
ptp: free ptp device pin descriptors properly
2020-05-20 08:15:33 +02:00
pwm
pwm: bcm2835: Dynamically allocate base
2020-05-02 17:23:07 +02:00
rapidio
rapidio: fix an error in get_user_pages_fast() error handling
2020-05-27 16:42:02 +02:00
ras
…
regulator
regulator: rk808: Lower log level on optional GPIOs being not available
2020-02-28 15:42:23 +01:00
remoteproc
remoteproc: Fix wrong rvring index computation
2020-05-02 17:23:14 +02:00
reset
reset: Fix potential use-after-free in __of_reset_control_get()
2019-11-25 09:53:42 +01:00
rpmsg
…
rtc
rtc: pm8xxx: Fix issue in RTC write path
2020-04-24 07:59:09 +02:00
s390
s390/qdio: put thinint indicator after early error
2020-06-30 15:38:23 -04:00
sbus
…
scsi
scsi: scsi_transport_spi: Fix function pointer check
2020-07-31 16:44:01 +02:00
sfi
…
sh
…
sn
…
soc
soc: qcom: smem: Use le32_to_cpu for comparison
2020-04-24 07:59:10 +02:00
spi
spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate
2020-07-22 09:10:50 +02:00
spmi
…
ssb
ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
2019-05-31 06:48:12 -07:00
staging
staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift
2020-07-31 16:44:05 +02:00
target
scsi: target: fix PR IN / READ FULL STATUS for FC
2020-05-02 17:23:17 +02:00
tc
…
thermal
Revert "thermal: mediatek: fix register index error"
2020-07-22 09:10:51 +02:00
thunderbolt
thunderbolt: Use 32-bit writes when writing ring producer/consumer
2019-11-06 12:18:14 +01:00
tty
vt: Reject zero-sized screen buffer size.
2020-07-31 16:44:05 +02:00
uio
uio_pdrv_genirq: fix use without device tree and no interrupt
2020-07-22 09:10:53 +02:00
usb
USB: serial: qcserial: add EM7305 QDL product ID
2020-08-21 11:01:53 +02:00
uwb
…
vfio
vfio-pci: Mask cap zero
2020-06-30 15:38:25 -04:00
vhost
vhost: vsock: kick send_pkt worker once device is started
2020-05-10 10:28:00 +02:00
video
vgacon: Fix for missing check in scrollback handling
2020-08-21 11:01:53 +02:00
virt
…
virtio
virtio-balloon: fix managed page counts when migrating pages between zones
2019-12-21 10:41:57 +01:00
vlynq
…
vme
vme: bridges: reduce stack usage
2020-02-28 15:42:33 +01:00
w1
w1: omap-hdq: cleanup to add missing newline for some dev_dbg
2020-06-20 10:24:22 +02:00
watchdog
watchdog: da9062: No need to ping manually before setting timeout
2020-06-30 15:38:26 -04:00
xen
xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
2020-05-02 17:23:17 +02:00
zorro
…
Kconfig
…
Makefile
…