iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Lee Jones c47385c73f ion: Do not 'put' ION handle until after its final use 
pass_to_user() eventually calls kref_put() on an ION handle which is
still live, potentially allowing for it to be legitimately freed by
the client.

Prevent this from happening before its final use in both ION_IOC_ALLOC
and ION_IOC_IMPORT.

Signed-off-by: Lee Jones <lee.jones@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-01-29 10:15:58 +01:00
..
accessibility
…
acpi
ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
2022-01-27 08:47:38 +01:00
amba
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2021-11-12 13:18:01 +01:00
android
binder: use wake_up_pollfree()
2021-12-14 10:04:48 +01:00
ata
libata: add horkage for ASMedia 1092
2021-12-14 10:04:48 +01:00
atm
atm: nicstar: register the interrupt handler in the right place
2021-07-20 16:21:08 +02:00
auxdisplay
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
2021-11-26 11:48:38 +01:00
base
regmap: Fix possible double-free in regcache_rbtree_exit()
2021-11-02 17:39:23 +01:00
bcma
bcma: Fix memory leak for internally-handled cores
2021-09-22 11:43:02 +02:00
block
floppy: Add max size check for user space request
2022-01-27 08:47:37 +01:00
bluetooth
Bluetooth: bfusb: fix division by zero in send path
2022-01-27 08:47:30 +01:00
bus
bus: qcom: Put child node before return
2021-05-22 10:40:23 +02:00
cdrom
cdrom: gdrom: initialize global variable at init time
2021-05-26 11:29:07 +02:00
char
char/mwave: Adjust io port register size
2022-01-27 08:47:35 +01:00
clk
clk: kirkwood: Fix a clocking boot regression
2021-09-22 11:43:02 +02:00
clocksource
clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
2021-03-03 17:44:37 +01:00
connector
…
cpufreq
cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
2021-10-06 10:23:41 +02:00
cpuidle
cpuidle: Fix kobject memory leaks in error paths
2021-11-26 11:48:33 +01:00
crypto
crypto: qce - fix uaf on qce_ahash_register_one
2022-01-27 08:47:33 +01:00
dax
…
dca
…
devfreq
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
2020-10-01 20:40:02 +02:00
dio
…
dma
dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
2022-01-27 08:47:41 +01:00
dma-buf
…
edac
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
2021-11-26 11:48:22 +01:00
eisa
…
extcon
extcon: max8997: Add missing modalias string
2021-07-20 16:21:05 +02:00
firewire
firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
2021-04-07 12:05:40 +02:00
firmware
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
2021-12-22 09:05:15 +01:00
fmc
…
fpga
…
gpio
gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
2022-01-27 08:47:37 +01:00
gpu
drm/i915: Flush TLBs before releasing backing store
2022-01-29 10:15:58 +01:00
hid
HID: apple: Do not reset quirks when the Fn key is not found
2022-01-27 08:47:36 +01:00
hsi
HSI: core: Fix return freed object in hsi_new_client
2022-01-27 08:47:37 +01:00
hv
hyperv/vmbus: include linux/bitops.h
2021-11-26 11:48:20 +01:00
hwmon
hwmon: (lm90) Do not report 'busy' status bit as alarm
2021-12-29 12:14:49 +01:00
hwspinlock
…
hwtracing
intel_th: Consistency and off-by-one fix
2021-05-22 10:40:16 +02:00
i2c
i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
2022-01-27 08:47:39 +01:00
ide
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2020-09-12 11:47:36 +02:00
idle
…
iio
iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
2021-12-14 10:04:50 +01:00
infiniband
RDMA/rxe: Fix a typo in opcode name
2022-01-27 08:47:41 +01:00
input
Input: spaceball - fix parsing of movement data packets
2022-01-05 12:31:25 +01:00
iommu
iommu/amd: Fix backport of 140456f994195b568ecd7fc2287a34eadffef3ca
2021-08-04 11:58:01 +02:00
ipack
ipack: ipoctal: fix module reference leak
2021-10-06 10:23:42 +02:00
irqchip
irqchip: nvic: Fix offset for Interrupt Priority Offsets
2021-12-14 10:04:50 +01:00
isdn
mISDN: change function names to avoid conflicts
2022-01-11 13:38:13 +01:00
leds
leds: ktd2692: Fix an error handling path
2021-07-20 16:21:05 +02:00
lguest
…
lightnvm
…
macintosh
…
mailbox
…
mcb
mcb: fix error handling in mcb_alloc_bus()
2021-10-06 10:23:39 +02:00
md
dm space map common: add bounds check to sm_ll_lookup_bitmap()
2022-01-27 08:47:38 +01:00
media
media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
2022-01-29 10:15:58 +01:00
memory
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
2021-11-26 11:48:37 +01:00
memstick
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2021-11-26 11:48:34 +01:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2020-11-10 10:23:57 +01:00
mfd
mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
2022-01-27 08:47:31 +01:00
misc
misc: lattice-ecp3-config: Fix task hung when firmware load failed
2022-01-27 08:47:36 +01:00
mmc
mmc: mxs-mmc: disable regulator on error and in the remove function
2021-11-26 11:48:35 +01:00
mtd
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
2021-11-26 11:48:38 +01:00
net
gianfar: fix jumbo packets+napi+rx overrun crash
2022-01-27 08:47:42 +01:00
nfc
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
2021-11-26 11:48:39 +01:00
ntb
NTB: hw: amd: fix an issue about leak system resources
2020-10-29 09:05:41 +01:00
nubus
…
nvdimm
libnvdimm/dimm: Avoid race between probe and available_slots_show()
2021-03-03 17:44:44 +01:00
nvme
nvme-pci: Fix an error handling path in 'nvme_probe()'
2021-09-22 11:42:57 +02:00
nvmem
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2021-10-27 09:33:58 +02:00
of
of: Fix truncation of memory sizes on 32-bit platforms
2021-07-20 16:21:05 +02:00
oprofile
…
parisc
parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
2022-01-27 08:47:41 +01:00
parport
parport: remove non-zero check on count
2021-09-22 11:43:07 +02:00
pci
PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
2022-01-27 08:47:32 +01:00
pcmcia
pcmcia: fix setting of kthread task states
2022-01-27 08:47:35 +01:00
perf
…
phy
phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe()
2021-07-20 16:21:05 +02:00
pinctrl
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
2021-09-22 11:43:04 +02:00
platform
platform/x86: apple-gmux: use resource_size() with res
2022-01-05 12:31:24 +01:00
pnp
…
power
power: bq25890: Enable continuous conversion for ADC at charging
2022-01-27 08:47:40 +01:00
powercap
powercap: restrict energy meter to root access
2020-11-10 21:04:57 +01:00
pps
…
ps3
powerpc/ps3: use dma_mapping_error()
2020-12-29 13:45:00 +01:00
ptp
ptp_pch: Load module automatically if ID matches
2021-10-17 10:05:39 +02:00
pwm
pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered
2021-09-26 13:36:18 +02:00
rapidio
rapidio: handle create_workqueue() failure
2021-05-26 11:29:06 +02:00
ras
…
regulator
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
2021-11-26 11:48:22 +01:00
remoteproc
remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load
2021-02-23 13:59:14 +01:00
reset
reset: ti-syscon: fix to_ti_syscon_reset_data macro
2021-07-28 09:14:24 +02:00
rpmsg
…
rtc
rtc: cmos: take rtc_lock while reading from CMOS
2022-01-27 08:47:31 +01:00
s390
s390/sclp_vt220: fix console name to match device
2021-07-20 16:21:11 +02:00
sbus
…
scsi
scsi: sr: Don't use GFP_DMA
2022-01-27 08:47:40 +01:00
sfi
…
sh
maple: fix wrong return value of maple_bus_init().
2021-11-26 11:48:41 +01:00
sn
…
soc
soc/tegra: fuse: Fix bitwise vs. logical OR warning
2021-12-22 09:05:14 +01:00
spi
spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
2022-01-27 08:47:34 +01:00
spmi
…
ssb
ssb: sdio: Don't overwrite const buffer if block_write fails
2021-07-20 16:20:57 +02:00
staging
ion: Do not 'put' ION handle until after its final use
2022-01-29 10:15:58 +01:00
target
scsi: target: Fix alua_tg_pt_gps_count tracking
2021-11-26 11:48:41 +01:00
tc
…
thermal
thermal: core: Reset previous low and high trip during thermal zone init
2021-12-08 08:45:05 +01:00
thunderbolt
…
tty
serial: core: Keep mctrl register state and cached copy in sync
2022-01-27 08:47:38 +01:00
uio
…
usb
usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
2022-01-27 08:47:37 +01:00
uwb
…
vfio
vfio: Use config not menuconfig for VFIO_NOIOMMU
2021-09-22 11:43:04 +02:00
vhost
vhost/vsock: fix incorrect used length reported to the guest
2021-12-08 08:45:04 +01:00
video
vgacon: Propagate console boot parameters before calling `vc_resize'
2021-12-08 08:45:06 +01:00
virt
drivers/virt/fsl_hypervisor: Fix error handling path
2020-10-29 09:05:35 +01:00
virtio
virtio_pci: Support surprise removal of virtio pci device
2022-01-11 13:38:11 +01:00
vlynq
…
vme
…
w1
w1: Misuse of get_user()/put_user() reported by sparse
2022-01-27 08:47:39 +01:00
watchdog
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
2021-11-26 11:48:38 +01:00
xen
xen: detect uninitialized xenbus in xenbus_init
2021-12-08 08:45:02 +01:00
zorro
…
Kconfig
…
Makefile
…