iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Kang Chen 98f49e693e nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties 
commit 11f180a5d62a51b484e9648f9b310e1bd50b1a57 upstream.

devm_kmalloc_array may fails, *fw_vsc_cfg might be null and cause
out-of-bounds write in device_property_read_u8_array later.

Fixes: a06347c04c13 ("NFC: Add Intel Fields Peak NFC solution driver")
Signed-off-by: Kang Chen <void0red@gmail.com>
Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org>
Reviewed-by: Simon Horman <simon.horman@corigine.com>
Link: https://lore.kernel.org/r/20230227093037.907654-1-void0red@gmail.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-03-17 08:31:44 +01:00
..
accessibility
…
acpi
ACPI: video: Fix Lenovo Ideapad Z570 DMI match
2023-03-11 16:31:47 +01:00
amba
…
android
binder: fix UAF of ref->proc caused by race condition
2022-09-15 12:17:03 +02:00
ata
ata: libata: Fix sata_down_spd_limit() when no link speed is reported
2023-02-22 12:47:12 +01:00
atm
atm: idt77252: fix use-after-free bugs caused by tst_timer
2022-08-25 11:15:39 +02:00
auxdisplay
…
base
driver core: Fix bus_type.match() error handling in __driver_attach()
2023-01-18 11:30:51 +01:00
bcma
…
block
rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
2023-03-11 16:31:53 +01:00
bluetooth
Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
2023-01-18 11:30:20 +01:00
bus
bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
2023-02-22 12:47:11 +01:00
cdrom
…
char
ipmi: fix use after free in _ipmi_destroy_user()
2023-01-18 11:30:44 +01:00
clk
clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
2023-03-11 16:31:44 +01:00
clocksource
clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled
2023-01-18 11:30:06 +01:00
connector
…
cpufreq
cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
2023-01-18 11:30:06 +01:00
cpuidle
cpuidle: dt: Return the correct numbers of parsed idle states
2023-01-18 11:30:04 +01:00
crypto
crypto: crypto4xx - Call dma_unmap_page when done
2023-03-11 16:31:38 +01:00
dax
…
dca
…
devfreq
PM / devfreq: rk3399_dmc: Disable edev on remove()
2022-06-14 16:59:17 +02:00
dio
drivers: dio: fix possible memory leak in dio_init()
2023-01-18 11:30:23 +01:00
dma
dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
2023-03-03 11:40:07 +01:00
dma-buf
…
edac
EDAC/device: Respect any driver-supplied workqueue polling value
2023-02-06 07:49:42 +01:00
eisa
…
extcon
extcon: Modify extcon device to be created after driver data is set
2022-06-14 16:59:37 +02:00
firewire
firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
2023-02-22 12:47:11 +01:00
firmware
firmware: coreboot: framebuffer: Ignore reserved pixel color bits
2023-03-11 16:31:48 +01:00
fmc
…
fpga
fpga: altera-pr-ip: fix unsigned comparison with less than zero
2022-08-25 11:15:14 +02:00
fsi
fsi: core: Check error number after calling ida_simple_get
2022-10-26 13:19:33 +02:00
gnss
…
gpio
gpio: vf610: connect GPIO label to dev name
2023-03-11 16:31:41 +01:00
gpu
drm/i915: Don't use BAR mappings for ring buffers with LLC
2023-03-17 08:31:44 +01:00
hid
HID: asus: use spinlock to safely schedule workers
2023-03-11 16:31:31 +01:00
hsi
HSI: omap_ssi_core: Fix error handling in ssi_init()
2023-01-18 11:30:30 +01:00
hv
Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
2022-12-08 11:18:29 +01:00
hwmon
hwmon: (mlxreg-fan) Return zero speed for broken fan
2023-03-11 16:31:42 +01:00
hwspinlock
…
hwtracing
intel_th: pci: Add Meteor Lake-P support
2022-08-25 11:15:30 +02:00
i2c
i2c: rk3x: fix a bunch of kernel-doc warnings
2023-02-22 12:47:12 +01:00
ide
…
idle
intel_idle: Disable IBRS during long idle
2022-11-23 07:53:45 +01:00
iio
iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()
2023-03-11 16:32:01 +01:00
infiniband
IB/hfi1: Assign npages earlier
2023-03-03 11:40:07 +01:00
input
Input: ads7846 - don't check penirq immediately for 7845
2023-03-11 16:31:43 +01:00
iommu
iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()
2023-01-18 11:30:55 +01:00
ipack
…
irqchip
irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
2023-03-11 16:31:39 +01:00
isdn
mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
2023-01-18 11:30:32 +01:00
leds
…
lightnvm
lightnvm: disable the subsystem
2022-05-01 17:00:38 +02:00
macintosh
macintosh: windfarm: Use unsigned type for 1-bit bitfields
2023-03-17 08:31:43 +01:00
mailbox
mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
2022-10-26 13:19:34 +02:00
mcb
mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
2023-01-18 11:30:27 +01:00
md
dm flakey: don't corrupt the zero page
2023-03-11 16:31:53 +01:00
media
media: ov5640: Fix analogue gain control
2023-03-17 08:31:44 +01:00
memory
memory: of: Fix refcount leak bug in of_get_ddr_timings()
2022-10-26 13:19:28 +02:00
memstick
memstick/ms_block: Fix a memory leak
2022-08-25 11:15:16 +02:00
message
…
mfd
mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
2023-03-11 16:31:43 +01:00
misc
mei: bus-fixup:upon error print return values of send and receive
2023-03-11 16:32:00 +01:00
mmc
mmc: sdio: fix possible resource leaks in some error paths
2023-02-22 12:47:20 +01:00
mtd
ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
2023-03-11 16:31:57 +01:00
mux
…
net
wifi: ath9k: use proper statements in conditionals
2023-03-11 16:31:55 +01:00
nfc
nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
2023-03-17 08:31:44 +01:00
ntb
NTB: ntb_tool: uninitialized heap data in tool_fn_write()
2022-08-25 11:15:39 +02:00
nubus
…
nvdimm
nvdimm: Fix badblocks clear off-by-one error
2022-07-07 17:35:09 +02:00
nvme
nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
2023-02-22 12:47:19 +01:00
nvmem
…
of
of: property: decrement node refcount in of_fwnode_get_reference_args()
2022-12-08 11:18:32 +01:00
opp
…
oprofile
…
parisc
parisc: led: Fix potential null-ptr-deref in start_task()
2023-01-18 11:30:44 +01:00
parport
parport_pc: Avoid FIFO port location truncation
2022-11-25 17:40:23 +01:00
pci
PCI: Avoid FLR for AMD FCH AHCI adapters
2023-03-11 16:31:55 +01:00
pcmcia
pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
2022-06-14 16:59:31 +02:00
perf
perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
2023-01-18 11:30:02 +01:00
phy
phy: rockchip-typec: Fix unsigned comparison with less than zero
2023-03-11 16:32:01 +01:00
pinctrl
pinctrl: at91: use devm_kasprintf() to avoid potential leaks
2023-03-11 16:31:48 +01:00
platform
platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe
2023-01-18 11:30:52 +01:00
pnp
PNP: fix name memory leak in pnp_alloc_dev()
2023-01-18 11:30:05 +01:00
power
power: supply: fix residue sysfs file in error handle route of __power_supply_register()
2023-01-18 11:30:29 +01:00
powercap
powercap: fix possible name leak in powercap_register_zone()
2023-03-11 16:31:36 +01:00
pps
…
ps3
…
ptp
ptp: replace snprintf with sysfs_emit
2022-04-15 14:15:00 +02:00
pwm
pwm: stm32-lp: fix the check on arr and cmp registers update
2023-03-11 16:31:56 +01:00
rapidio
rapidio: devices: fix missing put_device in mport_cdev_open
2023-01-18 11:30:08 +01:00
ras
…
regulator
regulator: s5m8767: Bounds check id indexing into arrays
2023-03-11 16:31:48 +01:00
remoteproc
remoteproc: qcom: wcnss: Fix handling of IRQs
2022-08-25 11:15:21 +02:00
reset
reset: tegra-bpmp: Restore Handle errors in BPMP response
2022-04-27 13:39:43 +02:00
rpmsg
rpmsg: glink: Avoid infinite loop on intent for missing channel
2023-03-11 16:31:45 +01:00
rtc
rtc: pm8xxx: fix set-alarm race
2023-03-11 16:31:48 +01:00
s390
s390/lcs: Fix return type of lcs_start_xmit()
2023-01-18 11:30:35 +01:00
sbus
…
scsi
scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
2023-03-17 08:31:43 +01:00
sfi
…
sh
…
siox
siox: fix possible memory leak in siox_device_add()
2022-11-25 17:40:23 +01:00
slimbus
slimbus: stream: correct presence rate frequencies
2022-11-25 17:40:25 +01:00
sn
…
soc
ARM: ux500: do not directly dereference __iomem
2023-01-18 11:30:41 +01:00
soundwire
soundwire: bus_type: fix remove and shutdown support
2022-08-25 11:15:15 +02:00
spi
spi: bcm63xx-hsspi: Fix multi-bit mode setting
2023-03-11 16:31:41 +01:00
spmi
spmi: pmic-arb: correct duplicate APID to PPID mapping logic
2022-10-26 13:19:34 +02:00
ssb
…
staging
Revert "spi: mt7621: Fix an error message in mt7621_spi_probe()"
2023-03-17 08:31:43 +01:00
target
scsi: target: core: Fix warning on RT kernels
2023-02-22 12:47:12 +01:00
tc
…
tee
tee: add overflow check in register_shm_helper()
2022-08-25 11:15:48 +02:00
thermal
thermal: intel: powerclamp: Fix cur_state for multi package system
2023-03-11 16:32:02 +01:00
thunderbolt
thunderbolt: Use the actual buffer in tb_async_error()
2022-09-15 12:17:03 +02:00
tty
tty: serial: fsl_lpuart: disable the CTS when send break signal
2023-03-11 16:32:00 +01:00
uio
uio: uio_dmem_genirq: Fix deadlock between irq config and handling
2023-01-18 11:30:25 +01:00
usb
USB: ene_usb6250: Allocate enough memory for full object
2023-03-11 16:32:01 +01:00
uwb
…
vfio
vfio: platform: Do not pass return buffer to ACPI _RST method
2023-01-18 11:30:25 +01:00
vhost
vhost/vsock: Use kvmalloc/kvfree for larger packets.
2022-10-26 13:19:26 +02:00
video
fbcon: Check font dimension limits
2023-02-22 12:47:14 +01:00
virt
vboxguest: Do not use devm for irq
2022-08-25 11:15:43 +02:00
virtio
virtio_mmio: Restore guest page size on resume
2022-07-21 21:09:30 +02:00
visorbus
…
vlynq
…
vme
vme: Fix error not catched in fake_init()
2023-01-18 11:30:28 +01:00
w1
w1: fix WARNING after calling w1_process()
2023-02-06 07:49:40 +01:00
watchdog
watchdog: pcwd_usb: Fix attempting to access uninitialized memory
2023-03-11 16:31:58 +01:00
xen
xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
2023-01-18 11:30:07 +01:00
zorro
…
Kconfig
…
Makefile
…