iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Marc Kleine-Budde 08d90846e4 can: m_can: m_can_tx_handler(): fix use after free of skb 
commit 2e8e79c416aae1de224c0f1860f2e3350fa171f8 upstream.

can_put_echo_skb() will clone skb then free the skb. Move the
can_put_echo_skb() for the m_can version 3.0.x directly before the
start of the xmit in hardware, similar to the 3.1.x branch.

Fixes: 80646733f11c ("can: m_can: update to support CAN FD features")
Link: https://lore.kernel.org/all/20220317081305.739554-1-mkl@pengutronix.de
Cc: stable@vger.kernel.org
Reported-by: Hangyu Hua <hbh25y@gmail.com>
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
[sudip: adjust context]
Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-07-21 20:59:29 +02:00
..
accessibility
…
acpi
ACPI: property: Release subnode properties with data nodes
2022-06-14 18:11:45 +02:00
amba
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2021-11-06 13:59:45 +01:00
android
binder: fix handling of error during copy
2022-01-27 09:19:38 +01:00
ata
ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
2022-06-22 14:11:20 +02:00
atm
atm: eni: Add check for dma_map_single
2022-03-23 09:12:07 +01:00
auxdisplay
auxdisplay: ht16k33: Fix frame buffer device blanking
2021-11-17 09:48:45 +01:00
base
regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips
2022-06-29 08:58:47 +02:00
bcma
bcma: Fix memory leak for internally-handled cores
2021-09-15 09:47:37 +02:00
block
xen/blkfront: force data bouncing when backend is untrusted
2022-07-07 17:36:53 +02:00
bluetooth
Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
2022-04-15 14:18:16 +02:00
bus
bus: ti-sysc: Fix warnings for unbind for serial
2022-06-14 18:11:54 +02:00
cdrom
…
char
random: update comment from copy_to_user() -> copy_to_iter()
2022-06-29 08:58:49 +02:00
clk
clk: at91: generated: consider range when calculating best rate
2022-05-25 09:14:36 +02:00
clocksource
clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup()
2022-07-07 17:36:53 +02:00
connector
…
counter
counter: 104-quad-8: Return error when invalid mode during ceiling_write
2021-09-15 09:47:34 +02:00
cpufreq
cpufreq: pmac32-cpufreq: Fix refcount leak bug
2022-07-21 20:59:24 +02:00
cpuidle
cpuidle: Fix kobject memory leaks in error paths
2021-11-17 09:48:36 +01:00
crypto
crypto: marvell/cesa - ECB does not IV
2022-06-14 18:11:40 +02:00
dax
dax: make sure inodes are flushed before destroy cache
2022-04-15 14:18:12 +02:00
dca
…
devfreq
PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events
2022-07-07 17:36:49 +02:00
dio
…
dma
dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
2022-07-12 16:30:50 +02:00
dma-buf
udmabuf: add back sanity check
2022-06-29 08:58:46 +02:00
edac
EDAC/synopsys: Read the error count from the correct register
2022-04-27 13:50:48 +02:00
eisa
…
extcon
extcon: Modify extcon device to be created after driver data is set
2022-06-14 18:12:00 +02:00
firewire
firewire: core: extend card->lock in fw_core_handle_bus_reset
2022-05-12 12:23:41 +02:00
firmware
firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
2022-06-14 18:11:54 +02:00
fpga
fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
2021-09-30 10:09:23 +02:00
fsi
fsi/sbefifo: Fix reset timeout
2021-07-14 16:53:42 +02:00
gnss
…
gpio
gpio: winbond: Fix error code in winbond_gpio_get()
2022-06-29 08:58:47 +02:00
gpu
drm/i915/gt: Serialize TLB invalidates with GT resets
2022-07-21 20:59:22 +02:00
greybus
greybus: svc: fix an error handling bug in gb_svc_hello()
2022-04-15 14:17:58 +02:00
hid
HID: elan: Fix potential double free in elan_input_configured
2022-06-14 18:11:33 +02:00
hsi
HSI: core: Fix return freed object in hsi_new_client
2022-01-27 09:19:41 +01:00
hv
random: remove unused irq_flags argument from add_interrupt_randomness()
2022-06-22 14:11:06 +02:00
hwmon
hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails
2022-07-07 17:36:50 +02:00
hwspinlock
…
hwtracing
coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
2022-06-14 18:11:52 +02:00
i2c
i2c: cadence: Unregister the clk notifier in error path
2022-07-12 16:30:49 +02:00
i3c
…
ide
…
idle
…
iio
iio: adc: axp288: Override TS pin bias current for some models
2022-06-29 08:58:48 +02:00
infiniband
RDMA/qedr: Fix reporting QP timeout attribute
2022-07-07 17:36:49 +02:00
input
Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
2022-06-14 18:12:03 +02:00
interconnect
…
iommu
iommu/vt-d: Fix PCI bus rescan device hot add
2022-07-12 16:30:46 +02:00
ipack
ipack: ipoctal: fix module reference leak
2021-10-06 15:42:36 +02:00
irqchip
irqchip: or1k-pic: Undefine mask_ack for level triggered hardware
2022-07-21 20:59:26 +02:00
isdn
mISDN: change function names to avoid conflicts
2022-01-11 15:23:33 +01:00
leds
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
2021-09-15 09:47:33 +02:00
lightnvm
lightnvm: disable the subsystem
2022-05-09 09:03:20 +02:00
macintosh
macintosh: via-pmu and via-cuda need RTC_LIB
2022-06-14 18:11:42 +02:00
mailbox
mailbox: forward the hrtimer if not queued and under a lock
2022-06-14 18:11:42 +02:00
mcb
mcb: fix error handling in mcb_alloc_bus()
2021-09-30 10:09:22 +02:00
md
dm raid: fix KASAN warning in raid5_add_disks
2022-07-07 17:36:48 +02:00
media
media: coda: Add more H264 levels for CODA960
2022-06-14 18:11:47 +02:00
memory
memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
2022-04-20 09:19:34 +02:00
memstick
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2021-11-17 09:48:37 +01:00
message
…
mfd
mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
2022-06-14 18:11:42 +02:00
misc
misc: rtsx_usb: set return value in rsp_buf alloc err path
2022-07-12 16:30:49 +02:00
mmc
mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing
2022-06-29 08:58:44 +02:00
mtd
Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting"
2022-07-15 10:14:53 +02:00
mux
…
net
can: m_can: m_can_tx_handler(): fix use after free of skb
2022-07-21 20:59:29 +02:00
nfc
NFC: nxp-nci: don't print header length mismatch on i2c error
2022-07-21 20:59:25 +02:00
ntb
NTB: perf: Fix an error code in perf_setup_inbuf()
2021-09-22 12:26:44 +02:00
nubus
…
nvdimm
nvdimm: Fix badblocks clear off-by-one error
2022-07-07 17:36:48 +02:00
nvme
nvme: fix regression when disconnect a recovering ctrl
2022-07-21 20:59:25 +02:00
nvmem
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2021-10-20 11:40:14 +02:00
of
of: overlay: do not break notify on NOTIFY_{OK|STOP}
2022-06-14 18:11:34 +02:00
opp
opp: Fix return in _opp_add_static_v2()
2021-11-17 09:48:44 +01:00
oprofile
…
parisc
parisc: Fix CPU affinity for Lasi, WAX and Dino chips
2022-04-15 14:18:36 +02:00
parport
parport: remove non-zero check on count
2021-09-22 12:26:36 +02:00
pci
PCI: qcom: Fix unbalanced PHY init on probe errors
2022-06-14 18:11:46 +02:00
pcmcia
pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
2022-06-14 18:11:50 +02:00
perf
arm_pmu: Validate single/group leader events
2022-04-27 13:50:50 +02:00
phy
phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
2022-06-14 18:11:52 +02:00
pinctrl
pinctrl: sunxi: sunxi_pconf_set: use correct offset
2022-07-12 16:30:48 +02:00
platform
platform/x86: hp-wmi: Ignore Sanitization Mode event
2022-07-21 20:59:25 +02:00
pnp
…
power
power: supply: axp288-charger: Set Vhold to 4.4V
2022-04-15 14:18:33 +02:00
powercap
…
pps
…
ps3
…
ptp
ptp: replace snprintf with sysfs_emit
2022-04-15 14:18:32 +02:00
pwm
pwm: lp3943: Fix duty calculation in case period was clamped
2022-06-14 18:11:51 +02:00
rapidio
…
ras
…
regulator
regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
2022-06-14 18:11:37 +02:00
remoteproc
remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
2022-04-15 14:18:19 +02:00
reset
reset: tegra-bpmp: Restore Handle errors in BPMP response
2022-04-27 13:50:47 +02:00
rpmsg
rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
2022-06-14 18:11:52 +02:00
rtc
rtc: mt6397: check return value after calling platform_get_resource()
2022-06-14 18:11:53 +02:00
s390
s390/lcs: fix variable dereferenced before check
2022-05-18 09:47:25 +02:00
sbus
…
scsi
scsi: pmcraid: Fix missing resource cleanup in error case
2022-06-22 14:11:20 +02:00
sfi
…
sh
maple: fix wrong return value of maple_bus_init().
2021-11-26 10:47:17 +01:00
siox
…
slimbus
slimbus: qcom: Fix IRQ check in qcom_slim_probe
2022-05-18 09:47:27 +02:00
soc
soc: ixp4xx/npe: Fix unused match warning
2022-07-21 20:59:27 +02:00
soundwire
soundwire: stream: Fix test for DP prepare complete
2021-07-14 16:53:45 +02:00
spi
spi: img-spfi: Fix pm_runtime_get_sync() error checking
2022-06-14 18:11:33 +02:00
spmi
…
ssb
…
staging
comedi: vmk80xx: fix expression for tx buffer size
2022-06-22 14:11:23 +02:00
target
scsi: target: tcmu: Fix possible page UAF
2022-04-20 09:19:36 +02:00
tc
…
tee
optee: use driver internal tee_context for some rpc
2022-03-02 11:41:04 +01:00
thermal
thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
2022-06-14 18:11:38 +02:00
thunderbolt
…
tty
serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle
2022-07-21 20:59:28 +02:00
uio
…
usb
usb: dwc3: gadget: Fix event pending check
2022-07-21 20:59:28 +02:00
vfio
vfio: Use config not menuconfig for VFIO_NOIOMMU
2021-09-22 12:26:23 +02:00
vhost
vringh: Fix loop descriptors check in the indirect cases
2022-06-14 18:12:02 +02:00
video
fbcon: Prevent that screen size is smaller than font size
2022-07-12 16:30:47 +02:00
virt
…
virtio
virtio_mmio: Restore guest page size on resume
2022-07-21 20:59:24 +02:00
visorbus
visorbus: fix error return code in visorchipset_init()
2021-07-14 16:53:42 +02:00
vlynq
…
vme
…
w1
w1: w1_therm: fixes w1_seq for ds28ea00 sensors
2022-04-15 14:18:35 +02:00
watchdog
watchdog: wdat_wdt: Stop watchdog when rebooting the system
2022-06-14 18:12:00 +02:00
xen
xen/gntdev: Avoid blocking in unmap_grant_pages()
2022-07-07 17:36:50 +02:00
zorro
…
Kconfig
…
Makefile
…