Mathias Nyman
b2ce37d86d
usb: Flush altsetting 0 endpoints before reinitializating them after reset. ...
commit 89bb3dc13ac29a563f4e4c555e422882f64742bd upstream.
usb core avoids sending a Set-Interface altsetting 0 request after device
reset, and instead relies on calling usb_disable_interface() and
usb_enable_interface() to flush and reset host-side of those endpoints.
xHCI hosts allocate and set up endpoint ring buffers and host_ep->hcpriv
during usb_hcd_alloc_bandwidth() callback, which in this case is called
before flushing the endpoint in usb_disable_interface().
Call usb_disable_interface() before usb_hcd_alloc_bandwidth() to ensure
URBs are flushed before new ring buffers for the endpoints are allocated.
Otherwise host driver will attempt to find and remove old stale URBs
from a freshly allocated new ringbuffer.
Cc: stable <stable@kernel.org>
Fixes: 4fe0387afahttps://lore.kernel.org/r/20250514132520.225345-1-mathias.nyman@linux.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-06-27 11:02:50 +01:00
ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
2025-06-27 11:02:45 +01:00
binder: fix UAF caused by offsets overwrite
2024-09-12 11:03:55 +02:00
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
2025-05-02 07:39:10 +02:00
atm: idt77252: prevent use after free in dequeue_rx()
2024-09-04 13:14:51 +02:00
pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
2025-06-27 11:02:49 +01:00
nbd: don't allow reconnect after disconnect
2025-03-13 12:42:52 +01:00
Bluetooth: btrtl: Prevent potential NULL dereference
2025-05-02 07:39:19 +02:00
bus: fsl-mc: fix double-free on mc_dev
2025-06-27 11:02:47 +01:00
virtio_console: fix missing byte order handling for cols and rows
2025-05-02 07:39:26 +02:00
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
2025-05-02 07:39:28 +02:00
clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
2025-06-04 14:32:29 +02:00
counter: stm32-lptimer-cnt: fix error handling when enabling
2025-04-10 14:29:39 +02:00
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
2025-05-02 07:39:25 +02:00
cpuidle: menu: Avoid discarding useful information
2025-06-04 14:32:32 +02:00
crypto: marvell/cesa - Avoid empty transfer descriptor
2025-06-27 11:02:45 +01:00
dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
2025-06-04 14:32:29 +02:00
udmabuf: fix a buf size overflow issue during udmabuf creation
2025-05-02 07:39:29 +02:00
EDAC/skx_common: Fix general protection fault
2025-06-27 11:02:45 +01:00
extcon: max8997: select IRQ_DOMAIN instead of depending on it
2024-06-16 13:28:43 +02:00
firewire: nosy: ensure user_length is taken into account when fetching packet contents
2024-05-17 11:43:54 +02:00
firmware: psci: Fix refcount leak in psci_dt_init
2025-06-27 11:02:46 +01:00
fpga: altera-cvp: Increase credit timeout
2025-06-04 14:32:32 +02:00
gpio: zynq: Fix wakeup source leaks on device unbind
2025-05-02 07:39:17 +02:00
drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang
2025-06-27 11:02:50 +01:00
greybus: Fix use-after-free bug in gb_interface_release due to race condition.
2024-07-05 09:08:20 +02:00
HID: quirks: Add ADATA XPG alpha wireless mouse support
2025-06-04 14:32:37 +02:00
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
2025-05-02 07:39:18 +02:00
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
2025-04-10 14:29:35 +02:00
hwmon: (xgene-hwmon) use appropriate type for the latency value
2025-06-04 14:32:34 +02:00
coresight: catu: Fix number of pages while using 64k pages
2025-04-10 14:29:41 +02:00
i2c: pxa: fix call balance of i2c->clk handling routines
2025-06-04 14:32:30 +02:00
i3c: Add NULL pointer check in i3c_master_queue_ibi()
2025-05-02 07:39:15 +02:00
iio: chemical: sps30: use aligned_s64 for timestamp
2025-06-04 14:32:28 +02:00
RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
2025-06-27 11:02:46 +01:00
Input: synaptics-rmi - fix crash with unsupported versions of F34
2025-06-27 11:02:49 +01:00
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
2025-06-04 14:32:26 +02:00
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
2025-06-04 14:32:25 +02:00
mISDN: Fix a use after free in hfcmulti_tx()
2024-08-19 05:33:42 +02:00
leds: lp8860: Write full EEPROM, not only half of it
2025-03-13 12:43:06 +01:00
macintosh/therm_windtunnel: fix module unload.
2024-08-19 05:33:34 +02:00
mailbox: use error ret code of of_parse_phandle_with_args()
2025-06-04 14:32:30 +02:00
mcb: fix a double free bug in chameleon_parse_gdd()
2025-05-02 07:39:26 +02:00
dm cache: prevent BUG_ON by blocking retries on failed device resumes
2025-06-04 14:32:31 +02:00
media: cx231xx: set device_caps for 417
2025-06-04 14:32:32 +02:00
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
2025-04-10 14:29:39 +02:00
scsi: fusion: Remove unused variable 'rc'
2024-12-14 19:44:29 +01:00
mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
2025-06-27 11:02:48 +01:00
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
2025-05-02 07:39:25 +02:00
mmc: sdhci: Disable SD card clock before changing parameters
2025-06-04 14:32:31 +02:00
mtd: rawnand: Add status chack in r852_ready()
2025-05-02 07:39:16 +02:00
net/mdiobus: Fix potential out-of-bounds read/write access
2025-06-27 11:02:50 +01:00
nfc: pn533: Add poll mod list filling check
2024-09-04 13:15:04 +02:00
ntb: reduce stack usage in idt_scan_mws
2025-05-02 07:39:28 +02:00
libnvdimm/labels: Fix divide error in nd_label_data_init()
2025-06-04 14:32:30 +02:00
nvmet-tcp: don't restore null sk_state_change
2025-06-04 14:32:35 +02:00
nvmem: core: improve range check for nvmem_cell_write()
2025-03-13 12:43:10 +01:00
of: module: add buffer overflow check in of_modalias()
2025-06-04 14:32:25 +02:00
parport_pc: add support for ASIX AX99100
2025-03-13 12:43:19 +01:00
PCI: Fix old_size lower bound in calculate_iosize() too
2025-06-04 14:32:33 +02:00
pcmcia: Use resource_size function on resource object
2024-09-12 11:03:52 +02:00
perf: arm_pmu: Don't disable counter in armpmu_add()
2025-05-02 07:39:09 +02:00
phy: core: don't require set_mode() callback for phy_get_mode() to work
2025-06-04 14:32:33 +02:00
pinctrl: at91: Fix possible out-of-boundary access
2025-06-27 11:02:46 +01:00
platform/x86: thinkpad_acpi: Ignore battery threshold change event notification
2025-06-04 14:32:37 +02:00
power: supply: max77693: Fix wrong conversion of charge input threshold value
2025-04-10 14:29:41 +02:00
powercap: call put_device() on an error path in powercap_register_control_type()
2025-04-10 14:29:36 +02:00
pps: Fix a use-after-free
2025-03-13 12:43:19 +01:00
ptp: Ensure info->enable callback is always set
2025-03-13 12:43:11 +01:00
pwm: mediatek: always use bus clock for PWM on MT7622
2025-05-02 07:39:18 +02:00
rapidio: fix an API misues when rio_add_net() fails
2025-03-13 12:43:28 +01:00
regulator: ad5398: Add device tree support
2025-06-04 14:32:34 +02:00
remoteproc: imx_rproc: Skip over memory region when node value is NULL
2024-08-19 05:33:44 +02:00
reset: berlin: fix OF node leak in probe() error path
2024-11-08 16:20:28 +01:00
rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
2025-06-27 11:02:48 +01:00
rtc: Fix offset calculation for .start_secs < 0
2025-06-27 11:02:48 +01:00
s390/cio: Fix CHPID "configure" attribute caching
2025-04-10 14:29:36 +02:00
scsi: iscsi: Fix incorrect error path labels for flashnode operations
2025-06-27 11:02:49 +01:00
sh: clk: Fix clk_enable() to return 0 on NULL clk
2025-01-09 13:23:29 +01:00
slimbus: messaging: Free transaction ID in delayed interrupt scenario
2025-03-13 12:43:33 +01:00
soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
2025-06-27 11:02:48 +01:00
soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
2024-11-08 16:20:25 +01:00
spi: sh-msiof: Fix maximum DMA transfer size
2025-06-27 11:02:45 +01:00
ssb: Fix division by zero issue in ssb_calc_clock_rate
2024-09-04 13:14:53 +02:00
staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
2025-06-04 14:32:28 +02:00
scsi: target: iscsi: Fix timeout on deleted connection
2025-06-04 14:32:29 +02:00
tee: optee: Fix supplicant wait loop
2025-03-13 12:43:23 +01:00
thermal/drivers/rockchip: Add missing rk3328 mapping entry
2025-05-02 07:39:16 +02:00
thunderbolt: Do not double dequeue a configuration request
2025-06-27 11:02:44 +01:00
vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
2025-06-27 11:02:48 +01:00
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
2024-09-12 11:03:55 +02:00
usb: Flush altsetting 0 endpoints before reinitializating them after reset.
2025-06-27 11:02:50 +01:00
vfio/pci: Enable iowrite64 and ioread64 for vfio pci
2025-03-13 12:43:13 +01:00
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
2025-06-27 11:02:48 +01:00
virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
2024-06-16 13:28:46 +02:00
watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart()
2024-12-14 19:44:44 +01:00
xen/swiotlb: relax alignment requirements
2025-06-04 14:32:37 +02:00
b2ce37d86d