iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/hid
History
Ma Ke a985685317 HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event 
[ Upstream commit ffe3b7837a2bb421df84d0177481db9f52c93a71 ]

There is a slab-out-of-bounds Write bug in hid-holtek-kbd driver.
The problem is the driver assumes the device must have an input
but some malicious devices violate this assumption.

Fix this by checking hid_device's input is non-empty before its usage.

Signed-off-by: Ma Ke <make_ruc2021@163.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-10-25 11:16:55 +02:00
..
i2c-hid
HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
2022-04-15 14:14:48 +02:00
intel-ish-hid
HID: intel_ish-hid: Add check for ishtp_dma_tx_map
2023-02-06 07:49:37 +01:00
usbhid
HID: usbhid: free raw_report buffers in usbhid_stop
2021-10-06 15:31:28 +02:00
hid-a4tech.c
HID: input: fix a4tech horizontal wheel custom usage
2019-08-29 08:28:40 +02:00
hid-accutouch.c
…
hid-alps.c
HID: alps: Declare U1_UNICORN_LEGACY support
2022-08-25 11:15:18 +02:00
hid-apple.c
HID: apple: Do not reset quirks when the Fn key is not found
2022-01-27 09:04:23 +01:00
hid-appleir.c
…
hid-asus.c
HID: asus: use spinlock to safely schedule workers
2023-03-11 16:31:31 +01:00
hid-aureal.c
…
hid-axff.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-belkin.c
…
hid-betopff.c
HID: betop: check shape of output reports
2023-02-06 07:49:39 +01:00
hid-cherry.c
…
hid-chicony.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-cmedia.c
…
hid-core.c
HID: core: Provide new max_buffer_size attribute to over-ride the default
2023-03-22 13:27:12 +01:00
hid-corsair.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-cougar.c
…
hid-cp2112.c
HID: cp2112: prevent a buffer overflow in cp2112_xfer()
2022-08-25 11:15:14 +02:00
hid-cypress.c
HID: cypress: Support Varmilo Keyboards' media hotkeys
2020-12-02 08:48:08 +01:00
hid-debug.c
HID: add mapping for KEY_ALL_APPLICATIONS
2022-03-08 19:04:09 +01:00
hid-dr.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-elan.c
HID: elan: Fix potential double free in elan_input_configured
2022-06-14 16:59:20 +02:00
hid-elecom.c
…
hid-elo.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-emsff.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-ezkey.c
…
hid-gaff.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-gembird.c
…
hid-generic.c
…
hid-gfrm.c
…
hid-google-hammer.c
HID: google: add jewel USB id
2023-06-09 10:24:01 +02:00
hid-gt683r.c
HID: gt683r: add missing MODULE_DEVICE_TABLE
2021-06-30 08:48:11 -04:00
hid-gyration.c
…
hid-holtek-kbd.c
HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
2023-10-25 11:16:55 +02:00
hid-holtek-mouse.c
HID: holtek: fix mouse probing
2021-12-29 12:20:43 +01:00
hid-holtekff.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-hyperv.c
HID: hyperv: fix possible memory leak in mousevsc_probe()
2022-11-25 17:40:16 +01:00
hid-icade.c
…
hid-ids.h
HID: add quirk for 03f0:464a HP Elite Presenter Mouse
2023-08-30 16:31:42 +02:00
hid-input.c
HID: add mapping for KEY_ALL_APPLICATIONS
2022-03-08 19:04:09 +01:00
hid-ite.c
HID: ite: Only bind to keyboard USB interface on Acer SW5-012 keyboard dock
2020-03-05 16:42:18 +01:00
hid-jabra.c
…
hid-kensington.c
…
hid-keytouch.c
…
hid-kye.c
…
hid-lcpower.c
…
hid-led.c
HID: hid-led: fix maximum brightness for Dream Cheeky
2022-06-14 16:59:20 +02:00
hid-lenovo.c
HID: lenovo: Add checks to fix of_led_classdev_register
2019-02-12 19:47:19 +01:00
hid-lg2ff.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-lg3ff.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-lg4ff.c
HID: hid-lg4ff: Add check for empty lbuf
2022-12-14 11:28:27 +01:00
hid-lg4ff.h
…
hid-lg.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-lg.h
…
hid-lgff.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-logitech-dj.c
…
hid-logitech-hidpp.c
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
2023-10-25 11:16:20 +02:00
hid-magicmouse.c
HID: magicmouse: Do not set BTN_MOUSE on double report
2022-11-03 23:52:26 +09:00
hid-mf.c
HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter
2021-03-11 14:05:01 +01:00
hid-microsoft.c
…
hid-monterey.c
…
hid-multitouch.c
HID: multitouch: Correct devm device reference for hidinput input_dev name
2023-09-23 10:48:09 +02:00
hid-nti.c
…
hid-ntrig.c
…
hid-ortek.c
…
hid-penmount.c
…
hid-petalynx.c
…
hid-picolcd_backlight.c
…
hid-picolcd_cir.c
…
hid-picolcd_core.c
…
hid-picolcd_debugfs.c
…
hid-picolcd_fb.c
…
hid-picolcd_lcd.c
…
hid-picolcd_leds.c
…
hid-picolcd.h
…
hid-pl.c
…
hid-plantronics.c
HID: plantronics: Additional PIDs for double volume key presses quirk
2023-01-18 11:30:40 +01:00
hid-primax.c
…
hid-prodikeys.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-quirks.c
HID: add quirk for 03f0:464a HP Elite Presenter Mouse
2023-08-30 16:31:42 +02:00
hid-redragon.c
…
hid-retrode.c
…
hid-rmi.c
HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI transport device
2020-01-04 19:13:00 +01:00
hid-roccat-arvo.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-arvo.h
…
hid-roccat-common.c
…
hid-roccat-common.h
…
hid-roccat-isku.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-isku.h
…
hid-roccat-kone.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-kone.h
…
hid-roccat-koneplus.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-koneplus.h
…
hid-roccat-konepure.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-kovaplus.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-kovaplus.h
…
hid-roccat-lua.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-lua.h
…
hid-roccat-pyra.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-pyra.h
…
hid-roccat-ryos.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-savu.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-roccat-savu.h
…
hid-roccat.c
HID: roccat: Fix use-after-free in roccat_read()
2022-10-26 13:19:41 +02:00
hid-saitek.c
HID: saitek: add madcatz variant of MMO7 mouse device ID
2022-11-10 17:46:54 +01:00
hid-samsung.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-sensor-custom.c
HID: hid-sensor-custom: set fixed size for custom attributes
2023-01-18 11:30:12 +01:00
hid-sensor-hub.c
HID: hid-sensor-hub: Return error for hid_set_field() failure
2021-06-30 08:48:10 -04:00
hid-sjoy.c
…
hid-sony.c
HID: sony: Fix for broken buttons on DS3 USB dongles
2020-06-07 13:17:53 +02:00
hid-speedlink.c
…
hid-steam.c
HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
2022-09-05 10:26:33 +02:00
hid-steelseries.c
…
hid-sunplus.c
…
hid-tivo.c
…
hid-tmff.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-topseed.c
…
hid-twinhan.c
…
hid-uclogic.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:18:04 +01:00
hid-udraw-ps3.c
…
hid-waltop.c
…
hid-wiimote-core.c
…
hid-wiimote-debug.c
…
hid-wiimote-modules.c
…
hid-wiimote.h
…
hid-xinmo.c
…
hid-zpff.c
HID: Fix assumption that devices have inputs
2019-11-06 13:06:18 +01:00
hid-zydacron.c
…
hidraw.c
HID: hidraw: fix memory leak in hidraw_release()
2022-09-05 10:26:33 +02:00
Kconfig
HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option
2022-01-05 12:34:57 +01:00
Makefile
…
uhid.c
HID: uhid: Over-ride the default maximum data buffer value with our own
2023-03-22 13:27:12 +01:00
wacom_sys.c
HID: wacom: remove the battery when the EKR is off
2023-09-23 10:47:56 +02:00
wacom_wac.c
HID: wacom: remove the battery when the EKR is off
2023-09-23 10:47:56 +02:00
wacom_wac.h
HID: wacom: remove the battery when the EKR is off
2023-09-23 10:47:56 +02:00
wacom.h
HID: wacom: remove the battery when the EKR is off
2023-09-23 10:47:56 +02:00