iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Marc Kleine-Budde d93ed9aff6 can: m_can: m_can_tx_handler(): fix use after free of skb 
commit 2e8e79c416aae1de224c0f1860f2e3350fa171f8 upstream.

can_put_echo_skb() will clone skb then free the skb. Move the
can_put_echo_skb() for the m_can version 3.0.x directly before the
start of the xmit in hardware, similar to the 3.1.x branch.

Fixes: 80646733f11c ("can: m_can: update to support CAN FD features")
Link: https://lore.kernel.org/all/20220317081305.739554-1-mkl@pengutronix.de
Cc: stable@vger.kernel.org
Reported-by: Hangyu Hua <hbh25y@gmail.com>
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
[sudip: adjust context]
Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-07-21 20:40:33 +02:00
..
accessibility
…
acpi
ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
2022-04-20 09:06:40 +02:00
amba
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2021-11-12 13:18:01 +01:00
android
binder: use wake_up_pollfree()
2021-12-14 10:04:48 +01:00
ata
ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
2022-06-25 11:45:17 +02:00
atm
atm: eni: Add check for dma_map_single
2022-03-23 09:00:34 +01:00
auxdisplay
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
2021-11-26 11:48:38 +01:00
base
x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
2022-06-16 13:00:52 +02:00
bcma
bcma: Fix memory leak for internally-handled cores
2021-09-22 11:43:02 +02:00
block
xen/blkfront: force data bouncing when backend is untrusted
2022-07-07 17:30:11 +02:00
bluetooth
Bluetooth: bfusb: fix division by zero in send path
2022-01-27 08:47:30 +01:00
bus
bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
2022-05-12 12:14:55 +02:00
cdrom
cdrom: gdrom: initialize global variable at init time
2021-05-26 11:29:07 +02:00
char
random: quiet urandom warning ratelimit suppression message
2022-07-02 16:17:14 +02:00
clk
clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()
2022-05-12 12:14:55 +02:00
clocksource
clocksource/drivers/sp804: Avoid error on multiple instances
2022-06-14 16:52:40 +02:00
connector
…
cpufreq
cpufreq: pmac32-cpufreq: Fix refcount leak bug
2022-07-21 20:40:31 +02:00
cpuidle
cpuidle: Fix kobject memory leaks in error paths
2021-11-26 11:48:33 +01:00
crypto
crypto: ccp - ccp_dmaengine_unregister release dma channels
2022-04-20 09:06:31 +02:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
2022-07-12 16:26:25 +02:00
dma-buf
…
edac
EDAC: Fix calculation of returned address and next offset in edac_align_ptr()
2022-02-23 11:56:41 +01:00
eisa
…
extcon
extcon: max8997: Add missing modalias string
2021-07-20 16:21:05 +02:00
firewire
firewire: core: extend card->lock in fw_core_handle_bus_reset
2022-05-12 12:14:57 +02:00
firmware
firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
2022-06-14 16:52:38 +02:00
fmc
…
fpga
…
gpio
MIPS: Remove repetitive increase irq_err_count
2022-07-02 16:17:14 +02:00
gpu
drm: remove drm_fb_helper_modinit
2022-07-02 16:17:16 +02:00
hid
HID: hid-led: fix maximum brightness for Dream Cheeky
2022-06-14 16:52:31 +02:00
hsi
HSI: core: Fix return freed object in hsi_new_client
2022-01-27 08:47:37 +01:00
hv
random: remove unused irq_flags argument from add_interrupt_randomness()
2022-06-25 11:45:04 +02:00
hwmon
hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails
2022-07-07 17:30:11 +02:00
hwspinlock
…
hwtracing
coresight: Fix TRCCONFIGR.QE sysfs interface
2022-04-20 09:06:28 +02:00
i2c
i2c: cadence: Unregister the clk notifier in error path
2022-07-12 16:26:25 +02:00
ide
…
idle
…
iio
iio: trigger: sysfs: fix use-after-free on remove
2022-07-02 16:17:15 +02:00
infiniband
RDMA/rxe: Generate a completion for unsupported/invalid opcode
2022-06-14 16:52:36 +02:00
input
Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
2022-06-14 16:52:41 +02:00
iommu
iommu/vt-d: Fix PCI bus rescan device hot add
2022-07-12 16:26:24 +02:00
ipack
ipack: ipoctal: fix module reference leak
2021-10-06 10:23:42 +02:00
irqchip
irqchip/gic-v3: Iterate over possible CPUs by for_each_possible_cpu()
2022-06-25 11:45:18 +02:00
isdn
mISDN: change function names to avoid conflicts
2022-01-11 13:38:13 +01:00
leds
leds: ktd2692: Fix an error handling path
2021-07-20 16:21:05 +02:00
lguest
…
lightnvm
lightnvm: disable the subsystem
2022-05-12 12:14:53 +02:00
macintosh
macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
2022-06-14 16:52:30 +02:00
mailbox
…
mcb
mcb: fix error handling in mcb_alloc_bus()
2021-10-06 10:23:39 +02:00
md
dm raid: fix KASAN warning in raid5_add_disks
2022-07-07 17:30:09 +02:00
media
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
2022-06-14 16:52:32 +02:00
memory
memory: emif: check the pointer temp in get_device_details()
2022-04-20 09:06:33 +02:00
memstick
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2021-11-26 11:48:34 +01:00
message
…
mfd
misc: rtsx: set NULL intfdata when probe fails
2022-06-14 16:52:40 +02:00
misc
misc: atmel-ssc: Fix IRQ check in ssc_probe
2022-06-25 11:45:18 +02:00
mmc
mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()
2022-05-25 08:39:48 +02:00
mtd
mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
2022-06-14 16:52:41 +02:00
net
can: m_can: m_can_tx_handler(): fix use after free of skb
2022-07-21 20:40:33 +02:00
nfc
NFC: nxp-nci: don't print header length mismatch on i2c error
2022-07-21 20:40:32 +02:00
ntb
…
nubus
…
nvdimm
libnvdimm/dimm: Avoid race between probe and available_slots_show()
2021-03-03 17:44:44 +01:00
nvme
nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
2022-06-14 16:52:29 +02:00
nvmem
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2021-10-27 09:33:58 +02:00
of
fdt: Update CRC check for rng-seed
2022-07-02 16:17:16 +02:00
oprofile
…
parisc
parisc: Fix sglist access in ccio-dma.c
2022-02-23 11:56:39 +01:00
parport
parport: remove non-zero check on count
2021-09-22 11:43:07 +02:00
pci
PCI: qcom: Fix unbalanced PHY init on probe errors
2022-06-14 16:52:41 +02:00
pcmcia
pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
2022-06-14 16:52:36 +02:00
perf
…
phy
phy: samsung: exynos5250-sata: fix missing device put in probe error paths
2022-05-12 12:14:54 +02:00
pinctrl
pinctrl: sunxi: a83t: Fix NAND function name for some pins
2022-07-12 16:26:25 +02:00
platform
platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
2022-04-27 13:14:10 +02:00
pnp
…
power
power: supply: wm8350-power: Add missing free in free_charger_irq
2022-04-20 09:06:35 +02:00
powercap
…
pps
…
ps3
powerpc/ps3: use dma_mapping_error()
2020-12-29 13:45:00 +01:00
ptp
ptp: replace snprintf with sysfs_emit
2022-04-20 09:06:42 +02:00
pwm
pwm: lp3943: Fix duty calculation in case period was clamped
2022-06-14 16:52:37 +02:00
rapidio
rapidio: handle create_workqueue() failure
2021-05-26 11:29:06 +02:00
ras
…
regulator
regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
2022-06-14 16:52:32 +02:00
remoteproc
remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
2022-04-20 09:06:36 +02:00
reset
reset: ti-syscon: fix to_ti_syscon_reset_data macro
2021-07-28 09:14:24 +02:00
rpmsg
rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
2022-06-14 16:52:37 +02:00
rtc
rtc: mt6397: check return value after calling platform_get_resource()
2022-06-14 16:52:37 +02:00
s390
s390/lcs: fix variable dereferenced before check
2022-05-18 09:15:43 +02:00
sbus
…
scsi
scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
2022-06-25 11:45:17 +02:00
sfi
…
sh
maple: fix wrong return value of maple_bus_init().
2021-11-26 11:48:41 +01:00
sn
…
soc
soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
2022-06-14 16:52:33 +02:00
spi
spi: img-spfi: Fix pm_runtime_get_sync() error checking
2022-06-14 16:52:31 +02:00
spmi
…
ssb
ssb: sdio: Don't overwrite const buffer if block_write fails
2021-07-20 16:20:57 +02:00
staging
comedi: vmk80xx: fix expression for tx buffer size
2022-06-25 11:45:18 +02:00
target
scsi: target: iscsi: Make sure the np under each tpg is unique
2022-02-16 12:43:53 +01:00
tc
…
thermal
thermal: int340x: Increase bitmap size
2022-04-20 09:06:30 +02:00
thunderbolt
…
tty
serial: 8250: fix return error code in serial8250_request_std_resource()
2022-07-21 20:40:33 +02:00
uio
…
usb
usb: dwc3: gadget: Fix event pending check
2022-07-21 20:40:32 +02:00
uwb
…
vfio
vfio: Use config not menuconfig for VFIO_NOIOMMU
2021-09-22 11:43:04 +02:00
vhost
vringh: Fix loop descriptors check in the indirect cases
2022-06-14 16:52:41 +02:00
video
video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove()
2022-06-14 16:52:38 +02:00
virt
…
virtio
virtio_mmio: Restore guest page size on resume
2022-07-21 20:40:31 +02:00
vlynq
…
vme
…
w1
w1: w1_therm: fixes w1_seq for ds28ea00 sensors
2022-04-20 09:06:43 +02:00
watchdog
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
2021-11-26 11:48:38 +01:00
xen
xen/gntdev: Avoid blocking in unmap_grant_pages()
2022-07-07 17:30:11 +02:00
zorro
…
Kconfig
…
Makefile
…