iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
868f247e47
linux/drivers
History
Wei Chen 868f247e47 fbdev: nvidia: Fix potential divide by zero 
[ Upstream commit 92e2a00f2987483e1f9253625828622edd442e61 ]

variable var->pixclock can be set by user. In case it
equals to zero, divide by zero would occur in nvidiafb_set_par.

Similar crashes have happened in other fbdev drivers. There
is no check and modification on var->pixclock along the call
chain to nvidia_check_var and nvidiafb_set_par. We believe it
could also be triggered in driver nvidia from user site.

Signed-off-by: Wei Chen <harperchen1110@gmail.com>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-04-05 11:16:42 +02:00
..
accessibility
…
acpi
ACPI: video: Fix Lenovo Ideapad Z570 DMI match
2023-03-11 16:43:56 +01:00
amba
…
android
binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
2022-12-08 11:23:01 +01:00
ata
ata: libata: Fix sata_down_spd_limit() when no link speed is reported
2023-02-22 12:50:24 +01:00
atm
atm: idt77252: fix kmemleak when rmmod idt77252
2023-04-05 11:16:37 +02:00
auxdisplay
…
base
driver core: Fix test_async_probe_init saves device in wrong array
2023-02-06 07:52:40 +01:00
bcma
…
block
block: sunvdc: add check for mdesc_grab() returning NULL
2023-03-22 13:28:06 +01:00
bluetooth
Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work
2023-04-05 11:16:38 +02:00
bus
bus: imx-weim: fix branch condition evaluates to a garbage value
2023-04-05 11:16:42 +02:00
cdrom
…
char
ipmi:watchdog: Set panic count to proper value on a panic
2023-03-17 08:32:53 +01:00
clk
clk: HI655X: select REGMAP instead of depending on it
2023-03-22 13:28:03 +01:00
clocksource
clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled
2023-01-18 11:40:56 +01:00
connector
…
counter
counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update
2023-01-18 11:41:24 +01:00
cpufreq
cpufreq: armada-37xx: stop using 0 as NULL pointer
2023-02-06 07:52:41 +01:00
cpuidle
cpuidle: dt: Return the correct numbers of parsed idle states
2023-01-18 11:40:53 +01:00
crypto
crypto: crypto4xx - Call dma_unmap_page when done
2023-03-11 16:43:42 +01:00
dax
…
dca
…
devfreq
PM/devfreq: governor: Add a private governor_data for governor
2023-01-18 11:41:52 +01:00
dio
drivers: dio: fix possible memory leak in dio_init()
2023-01-18 11:41:21 +01:00
dma
dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
2023-03-03 11:41:48 +01:00
dma-buf
udmabuf: Set the DMA mask for the udmabuf device (v2)
2022-09-05 10:27:45 +02:00
edac
EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
2023-02-06 07:52:44 +01:00
eisa
…
extcon
extcon: Modify extcon device to be created after driver data is set
2022-06-14 18:12:00 +02:00
firewire
firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
2023-02-22 12:50:22 +01:00
firmware
firmware: coreboot: framebuffer: Ignore reserved pixel color bits
2023-03-11 16:43:58 +01:00
fpga
fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
2023-02-22 12:50:28 +01:00
fsi
WRITE is "data source", not destination...
2023-02-22 12:50:23 +01:00
gnss
…
gpio
gpio: vf610: connect GPIO label to dev name
2023-03-11 16:43:47 +01:00
gpu
drm/i915: Don't use stolen memory for ring buffers with LLC
2023-03-22 13:28:09 +01:00
greybus
…
hid
HID: uhid: Over-ride the default maximum data buffer value with our own
2023-03-22 13:28:10 +01:00
hsi
HSI: omap_ssi_core: Fix error handling in ssi_init()
2023-01-18 11:41:28 +01:00
hv
Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
2022-12-08 11:22:58 +01:00
hwmon
hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
2023-04-05 11:16:38 +02:00
hwspinlock
…
hwtracing
intel_th: pci: Add Meteor Lake-P support
2022-08-25 11:18:13 +02:00
i2c
i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
2023-04-05 11:16:41 +02:00
i3c
…
ide
…
idle
intel_idle: Disable IBRS during long idle
2022-10-07 09:16:55 +02:00
iio
iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()
2023-03-11 16:44:15 +01:00
infiniband
IB/hfi1: Assign npages earlier
2023-03-03 11:41:48 +01:00
input
Input: ads7846 - don't check penirq immediately for 7845
2023-03-11 16:43:51 +01:00
interconnect
interconnect: fix mem leak when freeing nodes
2023-03-22 13:28:08 +01:00
iommu
iommu/vt-d: Fix PASID directory pointer coherency
2023-03-17 08:32:50 +01:00
ipack
…
irqchip
irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
2023-03-11 16:43:43 +01:00
isdn
mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
2023-01-18 11:41:32 +01:00
leds
…
lightnvm
…
macintosh
macintosh: windfarm: Use unsigned type for 1-bit bitfields
2023-03-17 08:32:52 +01:00
mailbox
mailbox: zynq-ipi: fix error handling while device_register() fails
2023-01-18 11:41:33 +01:00
mcb
mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
2023-01-18 11:41:25 +01:00
md
md: avoid signed overflow in slot_store()
2023-04-05 11:16:42 +02:00
media
media: m5mols: fix off-by-one loop termination error
2023-03-22 13:28:07 +01:00
memory
memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()
2023-02-06 07:52:34 +01:00
memstick
memstick/ms_block: Fix a memory leak
2022-08-25 11:17:55 +02:00
message
…
mfd
mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
2023-03-11 16:44:13 +01:00
misc
mei: bus-fixup:upon error print return values of send and receive
2023-03-11 16:44:14 +01:00
mmc
mmc: atmel-mci: fix race between stop command and start of next command
2023-03-22 13:28:07 +01:00
mtd
ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
2023-03-11 16:44:10 +01:00
mux
…
net
tun: avoid double free in tun_free_netdev
2023-04-05 11:16:41 +02:00
nfc
nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
2023-03-22 13:28:05 +01:00
ntb
NTB: ntb_tool: uninitialized heap data in tool_fn_write()
2022-08-25 11:18:26 +02:00
nubus
…
nvdimm
nvdimm: Fix badblocks clear off-by-one error
2022-07-07 17:36:48 +02:00
nvme
nvmet: avoid potential UAF in nvmet_req_complete()
2023-03-22 13:28:06 +01:00
nvmem
nvmem: core: fix cell removal on error
2023-02-22 12:50:28 +01:00
of
of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
2023-01-18 11:41:14 +01:00
opp
OPP: fix error checking in opp_migrate_dentry()
2023-03-11 16:43:41 +01:00
oprofile
…
parisc
parisc: led: Fix potential null-ptr-deref in start_task()
2023-01-18 11:41:50 +01:00
parport
parport_pc: Avoid FIFO port location truncation
2022-11-25 17:42:14 +01:00
pci
PCI: Unify delay handling for reset and resume
2023-03-22 13:28:09 +01:00
pcmcia
pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
2022-06-14 18:11:50 +02:00
perf
perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
2023-01-18 11:40:50 +01:00
phy
phy: rockchip-typec: Fix unsigned comparison with less than zero
2023-03-11 16:44:15 +01:00
pinctrl
pinctrl: at91: use devm_kasprintf() to avoid potential leaks
2023-03-11 16:43:57 +01:00
platform
platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
2023-04-05 11:16:38 +02:00
pnp
PNP: fix name memory leak in pnp_alloc_dev()
2023-01-18 11:40:54 +01:00
power
power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition
2023-04-05 11:16:36 +02:00
powercap
powercap: fix possible name leak in powercap_register_zone()
2023-03-11 16:43:40 +01:00
pps
…
ps3
…
ptp
…
pwm
pwm: stm32-lp: fix the check on arr and cmp registers update
2023-03-11 16:44:08 +01:00
rapidio
rapidio: devices: fix missing put_device in mport_cdev_open
2023-01-18 11:40:59 +01:00
ras
…
regulator
regulator: s5m8767: Bounds check id indexing into arrays
2023-03-11 16:43:57 +01:00
remoteproc
remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
2023-03-11 16:43:52 +01:00
reset
…
rpmsg
rpmsg: glink: Avoid infinite loop on intent for missing channel
2023-03-11 16:43:53 +01:00
rtc
rtc: sun6i: Always export the internal oscillator
2023-03-11 16:44:13 +01:00
s390
s390/dasd: add missing discipline function
2023-03-17 08:32:54 +01:00
sbus
…
scsi
scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
2023-04-05 11:16:40 +02:00
sfi
…
sh
…
siox
siox: fix possible memory leak in siox_device_add()
2022-11-25 17:42:14 +01:00
slimbus
slimbus: stream: correct presence rate frequencies
2022-11-25 17:42:17 +01:00
soc
ARM: ux500: do not directly dereference __iomem
2023-01-18 11:41:46 +01:00
soundwire
soundwire: bus_type: fix remove and shutdown support
2022-08-25 11:17:54 +02:00
spi
spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
2023-03-11 16:43:47 +01:00
spmi
spmi: pmic-arb: correct duplicate APID to PPID mapping logic
2022-10-26 13:22:43 +02:00
ssb
…
staging
staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
2023-03-13 10:18:25 +01:00
target
scsi: target: iscsi: Fix an error message in iscsi_check_key()
2023-04-05 11:16:39 +02:00
tc
…
tee
tee: optee: fix possible memory leak in optee_register_device()
2022-12-08 11:22:57 +01:00
thermal
thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
2023-03-11 16:44:13 +01:00
thunderbolt
thunderbolt: Use const qualifier for ring_interrupt_index
2023-04-05 11:16:39 +02:00
tty
hvc/xen: prevent concurrent accesses to the shared ring
2023-04-05 11:16:38 +02:00
uio
uio: uio_dmem_genirq: Fix deadlock between irq config and handling
2023-01-18 11:41:22 +01:00
usb
usb: chipidea: core: fix possible concurrent when switch role
2023-04-05 11:16:41 +02:00
vfio
vfio: platform: Do not pass return buffer to ACPI _RST method
2023-01-18 11:41:22 +01:00
vhost
vhost: fix range used in translate_desc()
2023-01-18 11:41:57 +01:00
video
fbdev: nvidia: Fix potential divide by zero
2023-04-05 11:16:42 +02:00
virt
vboxguest: Do not use devm for irq
2022-08-25 11:18:33 +02:00
virtio
virtio_mmio: Restore guest page size on resume
2022-07-21 20:59:24 +02:00
visorbus
…
vlynq
…
vme
vme: Fix error not catched in fake_init()
2023-01-18 11:41:26 +01:00
w1
w1: fix WARNING after calling w1_process()
2023-02-06 07:52:40 +01:00
watchdog
watchdog: pcwd_usb: Fix attempting to access uninitialized memory
2023-03-11 16:44:11 +01:00
xen
fix "direction" argument of iov_iter_kvec()
2023-02-22 12:50:23 +01:00
zorro
…
Kconfig
…
Makefile
…