iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/scsi
History
Tomas Henzl 82143faf01 scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() 
commit 578797f0c8cbc2e3ec5fc0dab87087b4c7073686 upstream.

A fix for:

BUG: KASAN: slab-out-of-bounds in ses_intf_remove+0x23f/0x270 [ses]
Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/12013

When edev->components is zero, accessing edev->component[0] members is
wrong.

Link: https://lore.kernel.org/r/20230202162451.15346-5-thenzl@redhat.com
Cc: stable@vger.kernel.org
Signed-off-by: Tomas Henzl <thenzl@redhat.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-03-10 09:34:29 +01:00
..
aacraid
scsi: aacraid: Allocate cmd_priv with scsicmd
2023-03-10 09:34:28 +01:00
aic7xxx
scsi: aic79xx: Use __ro_after_init explicitly
2022-09-15 22:01:24 -04:00
aic94xx
scsi: aic94xx: Add missing check for dma_map_single()
2023-03-10 09:33:20 +01:00
arcmsr
…
arm
scsi: arm: Move the SCSI pointer to private command data
2022-02-22 21:11:03 -05:00
be2iscsi
scsi: iscsi: Remove iscsi_get_task back_lock requirement
2022-06-21 21:19:23 -04:00
bfa
scsi: bfa: Remove unneeded flush_workqueue()
2022-04-25 23:38:38 -04:00
bnx2fc
scsi: bnx2fc: Avoid using get_cpu() in bnx2fc_cmd_alloc()
2022-05-16 21:26:50 -04:00
bnx2i
scsi: iscsi: Fix session removal on shutdown
2022-06-21 21:14:54 -04:00
csiostor
scsi: csiostor: Convert sysfs snprintf() to sysfs_emit()
2022-09-15 22:35:21 -04:00
cxgbi
treewide: use get_random_u32() when possible
2022-10-11 17:42:58 -06:00
cxlflash
scsi: cxlflash: Drop DID_ALLOC_FAILURE use
2022-09-06 22:05:59 -04:00
device_handler
scsi/device_handlers: Use the new blk_opf_t type
2022-07-14 12:14:32 -06:00
elx
scsi: elx: libefc: Fix second parameter type in state callbacks
2022-12-31 13:33:05 +01:00
esas2r
scsi: esas2r: Use flex array destination for memcpy()
2022-09-06 22:24:37 -04:00
fcoe
scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
2022-12-31 13:32:35 +01:00
fnic
SCSI misc on 20220804
2022-08-04 19:47:37 -07:00
hisi_sas
scsi: hisi_sas: Fix SATA devices missing issue during I_T nexus reset
2023-02-25 11:25:39 +01:00
ibmvscsi
scsi: ibmvfc: Avoid path failures during live migration
2022-11-07 18:57:39 +00:00
ibmvscsi_tgt
scsi: ibmvscsi_tgt: Fix repeated words in comment
2022-09-15 22:30:26 -04:00
isci
scsi: isci: Fix typo in comment
2022-05-23 23:24:10 -04:00
libfc
scsi: libfc: Remove get_cpu() semantics in fc_exch_em_alloc()
2022-05-16 21:26:50 -04:00
libsas
scsi: libsas: Add smp_ata_check_ready_type()
2023-02-25 11:25:39 +01:00
lpfc
scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
2023-03-10 09:33:56 +01:00
megaraid
Merge branch '6.1/scsi-queue' into 6.1/scsi-fixes
2022-10-21 01:10:34 +00:00
mpi3mr
scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi
2023-03-10 09:34:06 +01:00
mpt3sas
scsi: mpt3sas: Remove usage of dma_get_required_mask() API
2023-03-10 09:34:02 +01:00
mvsas
scsi: mvsas: Add PCI ID of RocketRaid 2640
2022-04-06 22:27:08 -04:00
pcmcia
scsi: sym53c500_cs: Stop using struct scsi_pointer
2022-04-06 22:11:52 -04:00
pm8001
scsi: pm80xx: Display proc_name in sysfs
2022-10-22 03:05:52 +00:00
qedf
SCSI misc on 20221007
2022-10-07 12:33:18 -07:00
qedi
treewide: use prandom_u32_max() when possible, part 1
2022-10-11 17:42:55 -06:00
qla2xxx
scsi: qla2xxx: Remove increment of interface err cnt
2023-03-10 09:34:29 +01:00
qla4xxx
scsi: qla4xxx: Drop redundant memset()
2022-04-25 23:33:36 -04:00
smartpqi
scsi: smartpqi: Correct device removal for multi-actuator devices
2022-12-31 13:33:06 +01:00
snic
scsi: snic: Fix memory leak with using debugfs_lookup()
2023-03-10 09:34:00 +01:00
sym53c8xx_2
scsi: sym53c8xx_2: Remove redundant "with"
2022-06-21 21:41:19 -04:00
.gitignore
…
3w-9xxx.c
scsi: 3w-9xxx: Avoid disabling device if failing to enable it
2022-09-06 22:22:24 -04:00
3w-9xxx.h
…
3w-sas.c
scsi: 3w-sas: Remove useless DMA-32 fallback configuration
2022-01-24 23:30:28 -05:00
3w-sas.h
…
3w-xxxx.c
scsi: 3w-xxxx: Replace one-element array with flexible-array member
2022-09-25 13:06:00 -04:00
3w-xxxx.h
scsi: 3w-xxxx: Replace one-element array with flexible-array member
2022-09-25 13:06:00 -04:00
53c700_d.h_shipped
…
53c700.c
scsi: 53c700: Stop clearing SCSI pointer fields
2022-02-22 21:11:03 -05:00
53c700.h
…
53c700.scr
…
a100u2w.c
scsi: a100u2w: Fix a kernel-doc warning
2021-11-29 23:02:13 -05:00
a100u2w.h
…
a2091.c
scsi: a2091: Convert m68k WD33C93 drivers to DMA API
2022-07-07 17:01:22 -04:00
a2091.h
…
a3000.c
scsi: a3000: Convert m68k WD33C93 drivers to DMA API
2022-07-07 17:01:22 -04:00
a3000.h
…
a4000t.c
…
advansys.c
scsi: advansys: Move the SCSI pointer to private command data
2022-02-22 21:11:03 -05:00
aha152x.c
scsi: aha152x: Stop using struct scsi_pointer
2022-03-29 23:42:18 -04:00
aha152x.h
…
aha1542.c
scsi: aha1542: Remove unneeded semicolon
2022-04-25 23:25:11 -04:00
aha1542.h
…
aha1740.c
scsi: Remove drivers/scsi/scsi.h
2022-02-22 21:11:02 -05:00
aha1740.h
…
am53c974.c
…
atari_scsi.c
scsi: NCR5380: Add SCp members to struct NCR5380_cmd
2022-02-22 21:11:03 -05:00
atp870u.c
scsi: atp870u: Fix a kernel-doc warning
2021-11-29 23:02:13 -05:00
atp870u.h
…
BusLogic.c
scsi: BusLogic: Remove bus_to_virt()
2022-06-27 22:52:05 -04:00
BusLogic.h
…
bvme6000_scsi.c
…
ch.c
scsi: ch: Do not initialise statics to 0
2022-07-26 22:13:29 -04:00
constants.c
…
dc395x.c
scsi: dc395x: Fix a missing check on list iterator
2022-04-26 08:51:56 -04:00
dc395x.h
…
dmx3191d.c
scsi: NCR5380: Remove the NCR5380_CMD_SIZE macro
2022-02-22 21:11:03 -05:00
esp_scsi.c
scsi: esp_scsi: Stop using the SCSI pointer
2022-02-22 21:11:04 -05:00
esp_scsi.h
scsi: esp_scsi: Stop using the SCSI pointer
2022-02-22 21:11:04 -05:00
fdomain_isa.c
…
fdomain_pci.c
…
fdomain.c
scsi: fdomain: Move the SCSI pointer to private command data
2022-02-22 21:11:04 -05:00
fdomain.h
…
FlashPoint.c
scsi: FlashPoint: Remove redundant variable bm_int_st
2022-08-01 19:52:03 -04:00
g_NCR5380.c
scsi: NCR5380: Add SCp members to struct NCR5380_cmd
2022-02-22 21:11:03 -05:00
gvp11.c
scsi: gvp11.c: Fix DMA mask calculation error
2022-07-13 23:18:26 -04:00
gvp11.h
…
hosts.c
scsi: core: Fix a use-after-free
2022-09-01 01:02:10 -04:00
hpsa_cmd.h
…
hpsa.c
scsi: hpsa: Fix allocation size for scsi_host_alloc()
2023-02-01 08:34:36 +01:00
hpsa.h
…
hptiop.c
scsi: hptiop: Use struct_size() helper in code related to struct hpt_iop_request_scsi_command
2022-09-25 13:02:23 -04:00
hptiop.h
scsi: hptiop: Replace one-element array with flexible-array member in struct hpt_iop_request_ioctl_command()
2022-09-25 13:04:17 -04:00
imm.c
scsi: imm: Move the SCSI pointer to private command data
2022-02-22 21:11:04 -05:00
imm.h
scsi: imm: Move the SCSI pointer to private command data
2022-02-22 21:11:04 -05:00
initio.c
scsi: initio: Remove redundant assignment to pointer scb
2022-08-31 23:39:57 -04:00
initio.h
scsi: initio: Stop using the SCSI pointer
2022-02-22 21:11:05 -05:00
ipr.c
scsi: ipr: Fix WARNING in ipr_init()
2022-12-31 13:32:35 +01:00
ipr.h
…
ips.c
scsi: Remove drivers/scsi/scsi.h
2022-02-22 21:11:02 -05:00
ips.h
…
iscsi_boot_sysfs.c
…
iscsi_tcp.c
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
2023-02-09 11:28:12 +01:00
iscsi_tcp.h
scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
2022-09-25 14:27:47 -04:00
jazz_esp.c
…
Kconfig
scsi: core: Make SCSI_MOD depend on BLOCK for cleaner .config files
2022-09-25 12:46:59 -04:00
lasi700.c
…
libiscsi_tcp.c
scsi: iscsi: Remove iscsi_get_task back_lock requirement
2022-06-21 21:19:23 -04:00
libiscsi.c
scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
2023-02-09 11:28:12 +01:00
mac53c94.c
scsi: mac53c94: Fix warning comparing pointer to 0
2022-04-25 23:23:05 -04:00
mac53c94.h
scsi: mac53c94: Stop using struct scsi_pointer
2022-02-27 21:35:30 -05:00
mac_esp.c
…
mac_scsi.c
scsi: NCR5380: Add SCp members to struct NCR5380_cmd
2022-02-22 21:11:03 -05:00
Makefile
scsi: dpt_i2o: Remove obsolete driver
2022-06-27 22:56:21 -04:00
megaraid.c
scsi: megaraid: Fix error check return value of register_chrdev()
2022-04-26 09:02:44 -04:00
megaraid.h
scsi: megaraid: Stop using the SCSI pointer
2022-02-22 21:11:05 -05:00
mesh.c
powerpc/powermac: Remove empty function note_scsi_host()
2022-06-26 10:29:44 +10:00
mesh.h
scsi: mesh: Stop using struct scsi_pointer
2022-02-27 21:34:02 -05:00
mvme16x_scsi.c
…
mvme147.c
scsi: wd33c93: Move the SCSI pointer to private command data
2022-02-22 21:11:07 -05:00
mvme147.h
…
mvumi.c
scsi: mvumi: Stop using the SCSI pointer
2022-02-22 21:11:06 -05:00
mvumi.h
scsi: mvumi: Stop using the SCSI pointer
2022-02-22 21:11:06 -05:00
myrb.c
scsi: myrb: Fix up null pointer access on myrb_cleanup()
2022-05-23 23:24:10 -04:00
myrb.h
…
myrs.c
scsi: myrs: Fix crash in error case
2022-01-25 00:09:41 -05:00
myrs.h
…
ncr53c8xx.c
scsi: zalon: Stop using the SCSI pointer
2022-02-22 21:11:07 -05:00
ncr53c8xx.h
scsi: zalon: Stop using the SCSI pointer
2022-02-22 21:11:07 -05:00
NCR5380.c
scsi: NCR5380: Add SCp members to struct NCR5380_cmd
2022-02-22 21:11:03 -05:00
NCR5380.h
scsi: NCR5380: Add SCp members to struct NCR5380_cmd
2022-02-22 21:11:03 -05:00
nsp32_debug.c
…
nsp32_io.h
…
nsp32.c
scsi: nsp32: Stop using the SCSI pointer
2022-02-22 21:11:06 -05:00
nsp32.h
scsi: nsp32: Stop using the SCSI pointer
2022-02-22 21:11:06 -05:00
pmcraid.c
scsi: pmcraid: Fix missing resource cleanup in error case
2022-06-07 22:05:14 -04:00
pmcraid.h
scsi: pmcraid: Remove the PMCRAID_PASSTHROUGH_IOCTL ioctl implementation
2022-03-29 23:32:26 -04:00
ppa.c
scsi: ppa: Move the SCSI pointer to private command data
2022-02-22 21:11:06 -05:00
ppa.h
…
ps3rom.c
…
qla1280.c
scsi: qla1280: Remove redundant variable
2022-05-19 20:26:21 -04:00
qla1280.h
scsi: qla1280: Move the SCSI pointer to private command data
2022-02-22 21:11:06 -05:00
qlogicfas408.c
scsi: Remove drivers/scsi/scsi.h
2022-02-22 21:11:02 -05:00
qlogicfas408.h
…
qlogicfas.c
scsi: Remove drivers/scsi/scsi.h
2022-02-22 21:11:02 -05:00
qlogicpti.c
scsi: qlogicpti: Fix dma_map_sg() check
2022-09-06 22:14:14 -04:00
qlogicpti.h
…
raid_class.c
…
script_asm.pl
…
scsi_bsg.c
scsi: bsg: Drop needless assignment in scsi_bsg_sg_io_fn()
2022-03-15 14:05:02 -04:00
scsi_common.c
…
scsi_debug.c
scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper()
2022-12-31 13:32:35 +01:00
scsi_debugfs.c
scsi: core: Remove struct scsi_request
2022-03-01 22:21:50 -05:00
scsi_debugfs.h
…
scsi_devinfo.c
…
scsi_dh.c
…
scsi_error.c
scsi: core: Fix a race between scsi_done() and scsi_timeout()
2022-12-31 13:32:30 +01:00
scsi_ioctl.c
scsi: Use blk_rq_map_user_io helper
2022-09-30 07:51:13 -06:00
scsi_lib_dma.c
…
scsi_lib.c
SCSI misc on 20221007
2022-10-07 12:33:18 -07:00
scsi_logging.c
scsi: core: scsi_logging: Fix a BUG
2022-03-29 23:29:19 -04:00
scsi_logging.h
…
scsi_netlink.c
…
scsi_pm.c
scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume()
2021-12-22 23:38:29 -05:00
scsi_priv.h
SCSI misc on 20221007
2022-10-07 12:33:18 -07:00
scsi_proc.c
proc: remove PDE_DATA() completely
2022-01-22 08:33:37 +02:00
scsi_sas_internal.h
…
scsi_scan.c
scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT"
2023-02-09 11:28:02 +01:00
scsi_sysctl.c
…
scsi_sysfs.c
scsi: core: Restrict legal sdev_state transitions via sysfs
2022-10-18 02:26:29 +00:00
scsi_trace.c
…
scsi_transport_api.h
…
scsi_transport_fc.c
scsi: scsi_transport_fc: Adjust struct fc_nl_event flex array usage
2022-09-25 12:52:48 -04:00
scsi_transport_iscsi.c
scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
2023-02-01 08:34:27 +01:00
scsi_transport_sas.c
scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
2022-11-08 01:52:52 +00:00
scsi_transport_spi.c
freezer: Have {,un}lock_system_sleep() save/restore flags
2022-09-07 21:53:48 +02:00
scsi_transport_srp.c
…
scsi.c
scsi: core: Revert "Simplify LLD module reference counting"
2022-09-01 01:02:10 -04:00
scsicam.c
scsicam: Fix use of page cache
2022-05-08 14:28:18 -04:00
sd_dif.c
scsi: sd: Reorganize DIF/DIX code to avoid calling revalidate twice
2022-05-02 16:59:11 -04:00
sd_zbc.c
treewide: Rename enum req_opf into enum req_op
2022-07-14 12:14:30 -06:00
sd.c
scsi: sd: Revert "Rework asynchronous resume support"
2022-08-22 22:45:25 -04:00
sd.h
scsi: sd: Revert "Rework asynchronous resume support"
2022-08-22 22:45:25 -04:00
sense_codes.h
…
ses.c
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
2023-03-10 09:34:29 +01:00
sg.c
use less confusing names for iov_iter direction initializers
2023-02-09 11:28:04 +01:00
sgiwd93.c
scsi: wd33c93: Move the SCSI pointer to private command data
2022-02-22 21:11:07 -05:00
sim710.c
…
sni_53c710.c
…
sr_ioctl.c
scsi: sr: Do not leak information in ioctl
2022-04-18 22:48:31 -04:00
sr_vendor.c
scsi: sr: Don't use GFP_DMA
2021-12-22 23:41:13 -05:00
sr.c
block: simplify disk shutdown
2022-06-28 06:30:26 -06:00
sr.h
sr: implement ->free_disk to simplify refcounting
2022-03-08 19:40:01 -07:00
st_options.h
…
st.c
SCSI misc on 20221007
2022-10-07 12:33:18 -07:00
st.h
scsi: don't use disk->private_data to find the scsi_driver
2022-03-08 19:40:00 -07:00
stex.c
scsi: stex: Properly zero out the passthrough command structure
2022-09-25 14:15:03 -04:00
storvsc_drv.c
scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM
2023-01-18 11:58:22 +01:00
sun3_scsi_vme.c
…
sun3_scsi.c
scsi: NCR5380: Add SCp members to struct NCR5380_cmd
2022-02-22 21:11:03 -05:00
sun3x_esp.c
…
sun_esp.c
…
virtio_scsi.c
SCSI misc on 20221007
2022-10-07 12:33:18 -07:00
vmw_pvscsi.c
scsi: vmw_pvscsi: No need to clear memory after a dma_alloc_coherent() call
2022-04-06 23:01:54 -04:00
vmw_pvscsi.h
scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
2022-06-07 21:30:56 -04:00
wd33c93.c
scsi: wd33c93: Remove dead code related to the long-gone config WD33C93_PIO
2022-09-25 13:29:53 -04:00
wd33c93.h
scsi: wd33c93: Remove dead code related to the long-gone config WD33C93_PIO
2022-09-25 13:29:53 -04:00
wd719x.c
scsi: wd719x: Return proper error code when dma_set_mask() fails
2022-03-01 23:56:28 -05:00
wd719x.h
scsi: wd719x: Stop using the SCSI pointer
2022-02-22 21:11:07 -05:00
xen-scsifront.c
scsi: xen: Drop use of internal host codes
2022-09-06 22:05:58 -04:00
zalon.c
scsi: zalon: Stop using the SCSI pointer
2022-02-22 21:11:07 -05:00
zorro7xx.c
scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
2022-03-30 00:05:42 -04:00
zorro_esp.c
…