Gavrilov Ilia f2a5ec7f7b iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter ...

[ Upstream commit b6b26d86c61c441144c72f842f7469bb686e1211 ]

The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow,
because the string specifier in the format string sscanf()
has no width limitation.

Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.

Fixes: ca3bf5d47cec ("iommu/amd: Introduces ivrs_acpihid kernel parameter")
Cc: stable@vger.kernel.org
Signed-off-by: Ilia.Gavrilov <Ilia.Gavrilov@infotecs.ru>
Reviewed-by: Kim Phillips <kim.phillips@amd.com>
Link: https://lore.kernel.org/r/20230202082719.1513849-1-Ilia.Gavrilov@infotecs.ru
Signed-off-by: Joerg Roedel <jroedel@suse.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-03-17 08:45:13 +01:00

..

amd

iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter

2023-03-17 08:45:13 +01:00

arm

iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop

2022-08-21 15:16:09 +02:00

intel

iommu/vt-d: Fix PASID directory pointer coherency

2023-03-17 08:45:08 +01:00

dma-iommu.c

iommu/dma: Fix compile warning in 32-bit builds

2021-07-14 16:56:55 +02:00

exynos-iommu.c

iommu/exynos: Handle failed IOMMU device registration properly

2022-08-21 15:16:08 +02:00

fsl_pamu_domain.c

…

fsl_pamu_domain.h

…

fsl_pamu.c

iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()

2023-01-14 10:16:05 +01:00

fsl_pamu.h

…

hyperv-iommu.c

…

io-pgtable-arm-v7s.c

iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure

2022-01-27 10:53:43 +01:00

io-pgtable-arm.c

iommu/io-pgtable-arm: Fix table descriptor paddr formatting

2022-01-27 10:54:06 +01:00

io-pgtable-arm.h

…

io-pgtable.c

…

ioasid.c

…

iommu-debugfs.c

…

iommu-sysfs.c

…

iommu-traces.c

…

iommu.c

iommu: Fix potential use-after-free during probe

2022-02-16 12:54:31 +01:00

iova.c

iommu/iova: Improve 32-bit free space estimate

2022-04-08 14:39:48 +02:00

ipmmu-vmsa.c

iommu/ipmmu-vmsa: Check for error num after setting mask

2022-04-08 14:40:15 +02:00

irq_remapping.c

…

irq_remapping.h

…

Kconfig

…

Makefile

…

msm_iommu_hw-8xxx.h

…

msm_iommu.c

iommu/msm: Fix an incorrect NULL check on list iterator

2022-06-09 10:21:26 +02:00

msm_iommu.h

…

mtk_iommu_v1.c

iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()

2023-01-18 11:45:00 +01:00

mtk_iommu.c

iommu/mediatek: Add list_del in mtk_iommu_remove

2022-06-09 10:21:18 +02:00

mtk_iommu.h

…

of_iommu.c

…

omap-iommu-debug.c

iommu/omap: Fix buffer overflow in debugfs

2022-10-26 13:25:41 +02:00

omap-iommu.c

iommu/omap: Fix regression in probe for NULL pointer dereference

2022-04-13 21:01:07 +02:00

omap-iommu.h

…

omap-iopgtable.h

…

rockchip-iommu.c

…

s390-iommu.c

…

sun50i-iommu.c

iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY

2023-01-14 10:16:07 +01:00

tegra-gart.c

…

tegra-smmu.c

…

virtio-iommu.c

iommu/virtio: Add missing MODULE_DEVICE_TABLE

2021-06-03 09:00:49 +02:00