iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Grant Grundler fa8d2ffad8 net: atlantic: verify hw_head_ lies within TX buffer ring 
[ Upstream commit 2120b7f4d128433ad8c5f503a9584deba0684901 ]

Bounds check hw_head index provided by NIC to verify it lies
within the TX buffer ring.

Reported-by: Aashay Shringarpure <aashay@google.com>
Reported-by: Yi Chou <yich@google.com>
Reported-by: Shervin Oloumi <enlightened@google.com>
Signed-off-by: Grant Grundler <grundler@chromium.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-05-25 09:10:41 +02:00
..
accessibility
…
acpi
ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
2022-04-15 14:14:59 +02:00
amba
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2021-11-06 13:58:45 +01:00
android
binder: fix async_free_space accounting for empty parcels
2022-01-05 12:34:59 +01:00
ata
ata: pata_marvell: Check the 'bmdma_addr' beforing reading
2022-04-27 13:39:44 +02:00
atm
atm: eni: Add check for dma_map_single
2022-03-23 09:10:44 +01:00
auxdisplay
auxdisplay: ht16k33: Fix frame buffer device blanking
2021-11-26 11:36:15 +01:00
base
PM: core: keep irq flags in device_pm_check_callbacks()
2022-04-15 14:14:54 +02:00
bcma
bcma: Fix memory leak for internally-handled cores
2021-09-22 11:47:55 +02:00
block
drbd: remove usage of list iterator variable after loop
2022-05-25 09:10:37 +02:00
bluetooth
Bluetooth: hci_serdev: call init_rwsem() before p->open()
2022-04-15 14:14:47 +02:00
bus
bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
2022-05-12 12:20:21 +02:00
cdrom
cdrom: gdrom: initialize global variable at init time
2021-05-26 11:48:34 +02:00
char
virtio_console: eliminate anonymous module_init & module_exit
2022-04-15 14:15:04 +02:00
clk
clk: at91: generated: consider range when calculating best rate
2022-05-25 09:10:39 +02:00
clocksource
clocksource: acpi_pm: fix return value of __setup handler
2022-04-15 14:14:44 +02:00
connector
…
cpufreq
cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
2021-10-06 15:31:21 +02:00
cpuidle
cpuidle: Fix kobject memory leaks in error paths
2021-11-26 11:36:08 +01:00
crypto
crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
2022-05-25 09:10:38 +02:00
dax
…
dca
…
devfreq
…
dio
…
dma
dma: at_xdmac: fix a missing check on list iterator
2022-04-27 13:39:44 +02:00
dma-buf
dma-buf/sync_file: Don't leak fences on merge failure
2021-07-28 11:13:45 +02:00
edac
EDAC: Fix calculation of returned address and next offset in edac_align_ptr()
2022-02-23 11:58:40 +01:00
eisa
…
extcon
extcon: max8997: Add missing modalias string
2021-07-20 16:15:57 +02:00
firewire
firewire: core: extend card->lock in fw_core_handle_bus_reset
2022-05-12 12:20:24 +02:00
firmware
efi: fix return value of __setup handlers
2022-03-23 09:10:44 +01:00
fmc
…
fpga
fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
2021-10-06 15:31:14 +02:00
fsi
fsi/sbefifo: Fix reset timeout
2021-07-20 16:15:55 +02:00
gnss
…
gpio
gpio: mvebu/pwm: Refuse requests with inverted polarity
2022-05-25 09:10:40 +02:00
gpu
drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
2022-05-25 09:10:38 +02:00
hid
HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
2022-04-15 14:14:48 +02:00
hsi
HSI: core: Fix return freed object in hsi_new_client
2022-01-27 09:04:24 +01:00
hv
Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
2022-04-20 09:12:49 +02:00
hwmon
hwmon: (f71882fg) Fix negative temperature
2022-05-18 09:42:48 +02:00
hwspinlock
…
hwtracing
coresight: Fix TRCCONFIGR.QE sysfs interface
2022-04-15 14:14:38 +02:00
i2c
i2c: pasemi: Wait for write xfers to finish
2022-04-20 09:12:50 +02:00
ide
…
idle
…
iio
iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
2022-05-12 12:20:19 +02:00
infiniband
RDMA/ib_srp: Fix a deadlock
2022-03-02 11:38:13 +01:00
input
Input: stmfts - fix reference leak in stmfts_input_open
2022-05-25 09:10:37 +02:00
iommu
iommu/arm-smmu-v3: fix event handling soft lockup
2022-04-15 14:15:01 +02:00
ipack
ipack: ipoctal: fix module reference leak
2021-10-06 15:31:25 +02:00
irqchip
irqchip/gic-v3: Fix GICR_CTLR.RWP polling
2022-04-15 14:15:06 +02:00
isdn
mISDN: change function names to avoid conflicts
2022-01-11 13:58:50 +01:00
leds
leds: ktd2692: Fix an error handling path
2021-07-20 16:15:57 +02:00
lightnvm
lightnvm: disable the subsystem
2022-05-01 17:00:38 +02:00
macintosh
…
mailbox
…
mcb
mcb: fix error handling in mcb_alloc_bus()
2021-10-06 15:31:12 +02:00
md
dm: interlock pending dm_io and dm_wait_for_bios_completion
2022-05-12 12:20:26 +02:00
media
media: vicodec: upon release, call m2m release before freeing ctrl handler
2022-05-01 17:00:34 +02:00
memory
memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
2022-04-20 09:12:48 +02:00
memstick
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2021-11-26 11:36:09 +01:00
message
…
mfd
mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
2022-04-15 14:14:51 +02:00
misc
kgdbts: fix return value of __setup handler
2022-04-15 14:14:52 +02:00
mmc
mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()
2022-05-25 09:10:38 +02:00
mtd
mtd: rawnand: Fix return value check of wait_for_completion_timeout
2022-05-12 12:20:21 +02:00
mux
…
net
net: atlantic: verify hw_head_ lies within TX buffer ring
2022-05-25 09:10:41 +02:00
nfc
nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs
2022-05-12 12:20:24 +02:00
ntb
NTB: perf: Fix an error code in perf_setup_inbuf()
2021-09-22 11:48:13 +02:00
nubus
…
nvdimm
…
nvme
nvme-rdma: fix possible use-after-free in transport error_recovery work
2022-02-23 11:58:38 +01:00
nvmem
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2021-10-20 11:23:02 +02:00
of
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
2021-09-22 11:48:07 +02:00
opp
opp: remove WARN when no valid OPPs remain
2021-09-03 09:58:01 +02:00
oprofile
…
parisc
parisc: Fix CPU affinity for Lasi, WAX and Dino chips
2022-04-15 14:15:04 +02:00
parport
parport: remove non-zero check on count
2021-09-22 11:48:08 +02:00
pci
PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold
2022-05-25 09:10:38 +02:00
pcmcia
pcmcia: fix setting of kthread task states
2022-01-27 09:04:21 +01:00
perf
arm_pmu: Validate single/group leader events
2022-04-27 13:39:45 +02:00
phy
phy: samsung: exynos5250-sata: fix missing device put in probe error paths
2022-05-12 12:20:20 +02:00
pinctrl
pinctrl: pistachio: fix use of irq_of_parse_and_map()
2022-05-12 12:20:21 +02:00
platform
platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
2022-04-27 13:39:43 +02:00
pnp
…
power
power: supply: axp20x_battery: properly report current when discharging
2022-04-15 14:15:01 +02:00
powercap
…
pps
…
ps3
…
ptp
ptp: replace snprintf with sysfs_emit
2022-04-15 14:15:00 +02:00
pwm
pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
2022-04-15 14:14:51 +02:00
rapidio
rapidio: handle create_workqueue() failure
2021-05-26 11:48:33 +02:00
ras
…
regulator
regulator: qcom_smd: fix for_each_child.cocci warnings
2022-04-15 14:14:42 +02:00
remoteproc
remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
2022-04-15 14:14:51 +02:00
reset
reset: tegra-bpmp: Restore Handle errors in BPMP response
2022-04-27 13:39:43 +02:00
rpmsg
rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
2022-02-08 18:23:07 +01:00
rtc
rtc: wm8350: Handle error for wm8350_register_irq
2022-04-15 14:15:00 +02:00
s390
s390/lcs: fix variable dereferenced before check
2022-05-18 09:42:48 +02:00
sbus
…
scsi
scsi: qla2xxx: Fix missed DMA unmap for aborted commands
2022-05-25 09:10:40 +02:00
sfi
…
sh
maple: fix wrong return value of maple_bus_init().
2021-11-26 11:36:21 +01:00
siox
…
slimbus
slimbus: qcom: Fix IRQ check in qcom_slim_probe
2022-05-18 09:42:49 +02:00
sn
…
soc
soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
2022-04-15 14:14:44 +02:00
soundwire
soundwire: stream: fix memory leak in stream config error path
2021-05-22 10:59:30 +02:00
spi
spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
2022-04-15 14:15:05 +02:00
spmi
…
ssb
ssb: Fix error return code in ssb_bus_scan()
2021-07-20 16:15:50 +02:00
staging
staging: ion: Prevent incorrect reference counting behavour
2022-04-27 13:39:45 +02:00
target
scsi: target: tcmu: Fix possible page UAF
2022-04-20 09:12:49 +02:00
tc
…
tee
tee: fix put order in teedev_close_context()
2022-01-27 09:04:17 +01:00
thermal
thermal: int340x: Increase bitmap size
2022-04-15 14:14:42 +02:00
thunderbolt
thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
2021-06-03 08:38:04 +02:00
tty
tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()
2022-05-18 09:42:50 +02:00
uio
…
usb
USB: serial: option: add Fibocom MA510 modem
2022-05-18 09:42:49 +02:00
uwb
…
vfio
vfio: Use config not menuconfig for VFIO_NOIOMMU
2021-09-22 11:48:01 +02:00
vhost
Fix double fget() in vhost_net_set_backend()
2022-05-25 09:10:38 +02:00
video
video: fbdev: sm712fb: Fix crash in smtcfb_write()
2022-04-15 14:14:56 +02:00
virt
…
virtio
virtio: acknowledge all features before access
2022-03-16 13:20:27 +01:00
visorbus
visorbus: fix error return code in visorchipset_init()
2021-07-20 16:15:55 +02:00
vlynq
…
vme
…
w1
w1: w1_therm: fixes w1_seq for ds28ea00 sensors
2022-04-15 14:15:03 +02:00
watchdog
ar7: fix kernel builds for compiler test
2021-11-26 11:36:15 +01:00
xen
xen/gnttab: fix gnttab_end_foreign_access() without page specified
2022-03-11 10:15:13 +01:00
zorro
…
Kconfig
…
Makefile
…