Szymon Heidrich
9fabdd7905
net: usb: smsc75xx: Limit packet length to skb->len ...
[ Upstream commit d8b228318935044dafe3a5bc07ee71a1f1424b8d ]
Packet length retrieved from skb data may be larger than
the actual socket buffer length (up to 9026 bytes). In such
case the cloned skb passed up the network stack will leak
kernel memory contents.
Fixes: d0cad87170
2023-03-22 13:28:06 +01:00
ACPI: video: Fix Lenovo Ideapad Z570 DMI match
2023-03-11 16:43:56 +01:00
ata: libata: Fix sata_down_spd_limit() when no link speed is reported
2023-02-22 12:50:24 +01:00
driver core: Fix test_async_probe_init saves device in wrong array
2023-02-06 07:52:40 +01:00
rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
2023-03-11 16:44:04 +01:00
bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
2023-02-22 12:50:23 +01:00
ipmi:watchdog: Set panic count to proper value on a panic
2023-03-17 08:32:53 +01:00
clk: HI655X: select REGMAP instead of depending on it
2023-03-22 13:28:03 +01:00
cpufreq: armada-37xx: stop using 0 as NULL pointer
2023-02-06 07:52:41 +01:00
crypto: crypto4xx - Call dma_unmap_page when done
2023-03-11 16:43:42 +01:00
PM/devfreq: governor: Add a private governor_data for governor
2023-01-18 11:41:52 +01:00
dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
2023-03-03 11:41:48 +01:00
EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
2023-02-06 07:52:44 +01:00
firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
2023-02-22 12:50:22 +01:00
firmware: coreboot: framebuffer: Ignore reserved pixel color bits
2023-03-11 16:43:58 +01:00
fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
2023-02-22 12:50:28 +01:00
WRITE is "data source", not destination...
2023-02-22 12:50:23 +01:00
gpio: vf610: connect GPIO label to dev name
2023-03-11 16:43:47 +01:00
drm/meson: fix 1px pink line on GXM when scaling video overlay
2023-03-22 13:28:03 +01:00
HID: Add Mapping for System Microphone Mute
2023-03-11 16:43:56 +01:00
HSI: omap_ssi_core: Fix error handling in ssi_init()
2023-01-18 11:41:28 +01:00
hwmon: (coretemp) Simplify platform device handling
2023-03-11 16:43:57 +01:00
i2c: rk3x: fix a bunch of kernel-doc warnings
2023-02-22 12:50:25 +01:00
iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()
2023-03-11 16:44:15 +01:00
IB/hfi1: Assign npages earlier
2023-03-03 11:41:48 +01:00
Input: ads7846 - don't check penirq immediately for 7845
2023-03-11 16:43:51 +01:00
iommu/vt-d: Fix PASID directory pointer coherency
2023-03-17 08:32:50 +01:00
irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
2023-03-11 16:43:43 +01:00
mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()
2023-01-18 11:41:32 +01:00
macintosh: windfarm: Use unsigned type for 1-bit bitfields
2023-03-17 08:32:52 +01:00
mailbox: zynq-ipi: fix error handling while device_register() fails
2023-01-18 11:41:33 +01:00
dm flakey: don't corrupt the zero page
2023-03-11 16:44:04 +01:00
media: ov5640: Fix analogue gain control
2023-03-17 08:32:52 +01:00
memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()
2023-02-06 07:52:34 +01:00
mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
2023-03-11 16:44:13 +01:00
mei: bus-fixup:upon error print return values of send and receive
2023-03-11 16:44:14 +01:00
mmc: mmc_spi: fix error handling in mmc_spi_probe()
2023-02-22 12:50:39 +01:00
ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
2023-03-11 16:44:10 +01:00
net: usb: smsc75xx: Limit packet length to skb->len
2023-03-22 13:28:06 +01:00
nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
2023-03-22 13:28:05 +01:00
nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
2023-02-22 12:50:35 +01:00
nvmem: core: fix cell removal on error
2023-02-22 12:50:28 +01:00
OPP: fix error checking in opp_migrate_dentry()
2023-03-11 16:43:41 +01:00
parisc: led: Fix potential null-ptr-deref in start_task()
2023-01-18 11:41:50 +01:00
PCI: Add ACS quirk for Wangxun NICs
2023-03-11 16:44:15 +01:00
phy: rockchip-typec: Fix unsigned comparison with less than zero
2023-03-11 16:44:15 +01:00
pinctrl: at91: use devm_kasprintf() to avoid potential leaks
2023-03-11 16:43:57 +01:00
platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
2023-02-06 07:52:42 +01:00
power: supply: fix null pointer dereferencing in power_supply_get_battery_info
2023-01-18 11:41:28 +01:00
powercap: fix possible name leak in powercap_register_zone()
2023-03-11 16:43:40 +01:00
pwm: stm32-lp: fix the check on arr and cmp registers update
2023-03-11 16:44:08 +01:00
regulator: s5m8767: Bounds check id indexing into arrays
2023-03-11 16:43:57 +01:00
remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
2023-03-11 16:43:52 +01:00
rpmsg: glink: Avoid infinite loop on intent for missing channel
2023-03-11 16:43:53 +01:00
rtc: sun6i: Always export the internal oscillator
2023-03-11 16:44:13 +01:00
s390/dasd: add missing discipline function
2023-03-17 08:32:54 +01:00
scsi: core: Fix a procfs host directory removal regression
2023-03-22 13:28:04 +01:00
ARM: ux500: do not directly dereference __iomem
2023-01-18 11:41:46 +01:00
spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
2023-03-11 16:43:47 +01:00
staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
2023-03-13 10:18:25 +01:00
scsi: target: core: Fix warning on RT kernels
2023-02-22 12:50:25 +01:00
thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
2023-03-11 16:44:13 +01:00
tty: serial: fsl_lpuart: disable the CTS when send break signal
2023-03-11 16:44:14 +01:00
USB: ene_usb6250: Allocate enough memory for full object
2023-03-11 16:44:15 +01:00
vhost: fix range used in translate_desc()
2023-01-18 11:41:57 +01:00
fbdev: smscufx: fix error handling code in ufx_usb_probe
2023-02-22 12:50:29 +01:00
w1: fix WARNING after calling w1_process()
2023-02-06 07:52:40 +01:00
watchdog: pcwd_usb: Fix attempting to access uninitialized memory
2023-03-11 16:44:11 +01:00
fix "direction" argument of iov_iter_kvec()
2023-02-22 12:50:23 +01:00
9fabdd7905