Sungho Kim
ce179e2434
PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call ...
[ Upstream commit 6238784e502b6a9fbeb3a6b77284b29baa4135cc ]
The error handling path in pci_p2pdma_add_resource() contains a bug in its
`pgmap_free` label.
Memory is allocated for the `p2p_pgmap` struct, and the pointer is stored
in `p2p_pgmap`. However, the error path calls devm_kfree() with `pgmap`,
which is a pointer to a member field within the `p2p_pgmap` struct, not the
base pointer of the allocation.
Correct the bug by passing the correct base pointer, `p2p_pgmap`, to
devm_kfree().
Signed-off-by: Sungho Kim <sungho.kim@furiosa.ai>
Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
Reviewed-by: Logan Gunthorpe <logang@deltatee.com>
Link: https://patch.msgid.link/20250820105714.2939896-1-sungho.kim@furiosa.ai
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-12-03 12:45:10 +01:00
ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
2025-12-03 12:45:07 +01:00
binder: remove "invalid inc weak" check
2025-10-29 14:00:00 +01:00
ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
2025-08-28 16:21:35 +02:00
atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
2025-09-04 14:05:54 +02:00
devcoredump: Fix circular locking dependency with devcd->mutex.
2025-12-03 12:45:05 +01:00
drbd: add missing kref_get in handle_write_conflicts
2025-08-28 16:21:24 +02:00
Bluetooth: btrtl: Prevent potential NULL dereference
2025-05-02 07:39:19 +02:00
Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
2025-06-27 11:02:55 +01:00
char: misc: Does not request module for miscdevice with dynamic minor
2025-12-03 12:45:10 +01:00
clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
2025-10-29 13:59:51 +01:00
clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
2025-12-03 12:45:07 +01:00
counter: stm32-lptimer-cnt: fix error handling when enabling
2025-04-10 14:29:39 +02:00
cpufreq/longhaul: handle NULL policy in longhaul_exit
2025-12-03 12:45:07 +01:00
Revert "cpuidle: menu: Avoid discarding useful information"
2025-10-29 13:59:59 +01:00
crypto: atmel - Fix dma_unmap_sg() direction
2025-10-29 13:59:52 +01:00
dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
2025-10-02 13:34:29 +02:00
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
2025-07-17 18:25:04 +02:00
EDAC/altera: Delete an inappropriate dma_free_coherent() call
2025-10-02 13:34:27 +02:00
firmware: meson_sm: fix device leak at probe
2025-10-29 13:59:52 +01:00
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
2025-08-28 16:21:32 +02:00
gpio: pca953x: fix IRQ storm on system wake up
2025-09-09 18:44:00 +02:00
drm/amdkfd: return -ENOTTY for unsupported IOCTLs
2025-12-03 12:45:09 +01:00
HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
2025-09-04 14:05:56 +02:00
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
2025-05-02 07:39:18 +02:00
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
2025-04-10 14:29:35 +02:00
hwmon: (dell-smm) Add support for Dell OptiPlex 7040
2025-12-03 12:45:08 +01:00
coresight: catu: Fix number of pages while using 64k pages
2025-04-10 14:29:41 +02:00
i2c: designware: Add disabling clocks when probe fails
2025-10-29 13:59:47 +01:00
i3c: don't fail if GETHDRCAP is unsupported
2025-08-28 16:21:29 +02:00
iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
2025-12-03 12:45:09 +01:00
RDMA/siw: Always report immediate post SQ errors
2025-10-29 13:59:49 +01:00
Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
2025-10-29 13:59:50 +01:00
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
2025-06-04 14:32:26 +02:00
irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
2025-12-03 12:45:07 +01:00
mISDN: Fix memory leak in dsp_hwec_enable()
2025-09-09 18:43:57 +02:00
leds: lp8860: Write full EEPROM, not only half of it
2025-03-13 12:43:06 +01:00
macintosh/therm_windtunnel: fix module unload.
2024-08-19 05:33:34 +02:00
mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
2025-10-29 13:59:52 +01:00
mcb: fix a double free bug in chameleon_parse_gdd()
2025-05-02 07:39:26 +02:00
dm: fix NULL pointer dereference in __dm_suspend()
2025-10-29 13:59:55 +01:00
media: imon: make send_packet() more robust
2025-12-03 12:45:09 +01:00
memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
2025-10-29 14:00:00 +01:00
memstick: Add timeout to prevent indefinite waiting
2025-12-03 12:45:06 +01:00
scsi: fusion: Remove unused variable 'rc'
2024-12-14 19:44:29 +01:00
mfd: madera: Work around false-positive -Wininitialized warning
2025-12-03 12:45:08 +01:00
misc: genwqe: Fix incorrect cmd field being reported in error
2025-10-29 13:59:48 +01:00
mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
2025-12-03 12:45:07 +01:00
spi: cadence-quadspi: Flush posted register writes before DAC access
2025-10-29 14:00:00 +01:00
can: gs_usb: increase max interface to U8_MAX
2025-12-03 12:45:06 +01:00
nfc: pn533: Add poll mod list filling check
2024-09-04 13:15:04 +02:00
ntb: reduce stack usage in idt_scan_mws
2025-05-02 07:39:28 +02:00
libnvdimm/labels: Fix divide error in nd_label_data_init()
2025-06-04 14:32:30 +02:00
nvmet-tcp: don't restore null sk_state_change
2025-06-04 14:32:35 +02:00
nvmem: core: improve range check for nvmem_cell_write()
2025-03-13 12:43:10 +01:00
of: module: add buffer overflow check in of_modalias()
2025-06-04 14:32:25 +02:00
parport_pc: add support for ASIX AX99100
2025-03-13 12:43:19 +01:00
PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
2025-12-03 12:45:10 +01:00
pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
2025-10-02 13:34:30 +02:00
perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
2025-10-29 13:59:46 +01:00
phy: ti-pipe3: fix device leak at unbind
2025-10-02 13:34:30 +02:00
pinctrl: check the return value of pinmux_ops::get_function_name()
2025-10-29 13:59:50 +01:00
platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
2025-08-28 16:21:25 +02:00
power: supply: bq27xxx: restrict no-battery detection to bq27000
2025-10-02 13:34:31 +02:00
powercap: call put_device() on an error path in powercap_register_control_type()
2025-04-10 14:29:36 +02:00
pps: fix warning in pps_register_cdev when register device fail
2025-10-29 13:59:48 +01:00
ptp: Ensure info->enable callback is always set
2025-03-13 12:43:11 +01:00
pwm: berlin: Fix wrong register in suspend/resume
2025-10-29 13:59:56 +01:00
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
2025-06-27 11:02:56 +01:00
regulator: core: fix NULL dereference on unbind due to stale coupling data
2025-08-28 16:21:17 +02:00
remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
2025-10-29 13:59:49 +01:00
reset: berlin: fix OF node leak in probe() error path
2024-11-08 16:20:28 +01:00
rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
2025-06-27 11:02:48 +01:00
rtc: interface: Fix long-standing race when setting alarm
2025-10-29 13:59:53 +01:00
scsi: s390: zfcp: Ensure synchronous unit_add
2025-06-27 11:02:56 +01:00
scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
2025-10-29 13:59:53 +01:00
sh: clk: Fix clk_enable() to return 0 on NULL clk
2025-01-09 13:23:29 +01:00
slimbus: messaging: Free transaction ID in delayed interrupt scenario
2025-03-13 12:43:33 +01:00
soc: qcom: smem: Fix endian-unaware access of num_entries
2025-12-03 12:45:06 +01:00
soundwire: stream: restore params when prepare ports fail
2025-08-28 16:21:21 +02:00
spi: loopback-test: Don't use %pK through printk
2025-12-03 12:45:06 +01:00
ssb: Fix division by zero issue in ssb_calc_clock_rate
2024-09-04 13:14:53 +02:00
comedi: fix divide-by-zero in comedi_buf_munge()
2025-10-29 14:00:00 +01:00
scsi: target: target_core_configfs: Add length check to avoid buffer overflow
2025-10-29 13:59:44 +01:00
tee: allow a driver to allocate a tee_device without a pool
2025-12-03 12:45:07 +01:00
thermal: sysfs: Return ENODATA instead of EAGAIN for reads
2025-08-28 16:21:25 +02:00
thunderbolt: Fix copy+paste error in match_service_id()
2025-08-28 16:21:30 +02:00
serial: 8250_dw: handle reset control deassert error
2025-12-03 12:45:06 +01:00
uio_hv_generic: Let userspace take care of interrupt mask
2025-10-29 13:59:50 +01:00
usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
2025-12-03 12:45:09 +01:00
vfio/pci: Enable iowrite64 and ioread64 for vfio pci
2025-03-13 12:43:13 +01:00
vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
2025-09-04 14:05:53 +02:00
video: backlight: lp855x_bl: Set correct EPROM start for LP8556
2025-12-03 12:45:07 +01:00
watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
2025-10-29 13:59:48 +01:00
xen/events: Update virq_to_irq on migration
2025-10-29 13:59:56 +01:00
ce179e2434