Ma Ke
944474274e
sunvdc: Balance device refcount in vdc_port_mpgroup_check ...
commit 63ce53724637e2e7ba51fe3a4f78351715049905 upstream.
Using device_find_child() to locate a probed virtual-device-port node
causes a device refcount imbalance, as device_find_child() internally
calls get_device() to increment the device’s reference count before
returning its pointer. vdc_port_mpgroup_check() directly returns true
upon finding a matching device without releasing the reference via
put_device(). We should call put_device() to decrement refcount.
As comment of device_find_child() says, 'NOTE: you will need to drop
the reference with put_device() after use'.
Found by code review.
Cc: stable@vger.kernel.org
Fixes: 3ee70591d6https://lore.kernel.org/r/20250719075856.3447953-1-make24@iscas.ac.cn
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-08-28 16:21:23 +02:00
Revert "ACPI: battery: negate current when discharging"
2025-07-17 18:25:03 +02:00
ata: pata_cs5536: fix build on 32-bit UML
2025-07-17 18:24:57 +02:00
atm: idt77252: Add missing dma_map_error()
2025-07-17 18:25:05 +02:00
PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
2025-06-27 11:02:53 +01:00
sunvdc: Balance device refcount in vdc_port_mpgroup_check
2025-08-28 16:21:23 +02:00
Bluetooth: btrtl: Prevent potential NULL dereference
2025-05-02 07:39:19 +02:00
Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
2025-06-27 11:02:55 +01:00
hwrng: mtk - handle devm_pm_runtime_enable errors
2025-08-28 16:21:21 +02:00
clk: sunxi-ng: v3s: Fix de clock definition
2025-08-28 16:21:20 +02:00
clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
2025-06-04 14:32:29 +02:00
counter: stm32-lptimer-cnt: fix error handling when enabling
2025-04-10 14:29:39 +02:00
cpufreq: Init policy->rwsem before it may be possibly used
2025-08-28 16:21:19 +02:00
cpuidle: menu: Avoid discarding useful information
2025-06-04 14:32:32 +02:00
crypto: qat - fix seq_file position update in adf_ring_next()
2025-08-28 16:21:21 +02:00
dmaengine: nbpfaxi: Add missing check after DMA map
2025-08-28 16:21:21 +02:00
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
2025-07-17 18:25:04 +02:00
EDAC/altera: Use correct write width with the INTTEST register
2025-06-27 11:02:51 +01:00
firmware: psci: Fix refcount leak in psci_dt_init
2025-06-27 11:02:46 +01:00
fpga: altera-cvp: Increase credit timeout
2025-06-04 14:32:32 +02:00
gpio: zynq: Fix wakeup source leaks on device unbind
2025-05-02 07:39:17 +02:00
drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
2025-08-28 16:21:19 +02:00
HID: core: do not bypass hid_hw_raw_request
2025-08-28 16:21:14 +02:00
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
2025-05-02 07:39:18 +02:00
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
2025-04-10 14:29:35 +02:00
hwmon: (occ) fix unaligned accesses
2025-06-27 11:02:57 +01:00
coresight: catu: Fix number of pages while using 64k pages
2025-04-10 14:29:41 +02:00
i2c: qup: jump out of the loop in case of timeout
2025-08-28 16:21:17 +02:00
i3c: Add NULL pointer check in i3c_master_queue_ibi()
2025-05-02 07:39:15 +02:00
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
2025-08-28 16:21:15 +02:00
RDMA/core: Rate limit GID cache warning messages
2025-08-28 16:21:17 +02:00
Input: xpad - set correct controller type for Acer NGR200
2025-08-28 16:21:14 +02:00
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
2025-06-04 14:32:26 +02:00
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
2025-06-04 14:32:25 +02:00
leds: lp8860: Write full EEPROM, not only half of it
2025-03-13 12:43:06 +01:00
mailbox: Not protect module_put with spin_lock_irqsave
2025-07-17 18:24:49 +02:00
mcb: fix a double free bug in chameleon_parse_gdd()
2025-05-02 07:39:26 +02:00
md/raid1: Fix stack memory use after return in raid1_reshape
2025-07-17 18:25:04 +02:00
media: uvcvideo: Rollback non processed entities on error
2025-07-17 18:25:01 +02:00
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
2025-08-28 16:21:15 +02:00
mfd: max14577: Fix wakeup source leaks on device unbind
2025-07-17 18:24:49 +02:00
Revert "vmci: Prevent the dispatching of uninitialized payloads"
2025-08-28 16:21:18 +02:00
mmc: sdhci_am654: Workaround for Errata i2312
2025-08-28 16:21:15 +02:00
mtd: rawnand: atmel: set pmecc data setup time
2025-08-28 16:21:21 +02:00
net: dpaa: fix device leak when querying time stamp info
2025-08-28 16:21:23 +02:00
ntb: reduce stack usage in idt_scan_mws
2025-05-02 07:39:28 +02:00
libnvdimm/labels: Fix divide error in nd_label_data_init()
2025-06-04 14:32:30 +02:00
nvmet-tcp: don't restore null sk_state_change
2025-06-04 14:32:35 +02:00
nvmem: core: improve range check for nvmem_cell_write()
2025-03-13 12:43:10 +01:00
of: module: add buffer overflow check in of_modalias()
2025-06-04 14:32:25 +02:00
parport_pc: add support for ASIX AX99100
2025-03-13 12:43:19 +01:00
pci/hotplug/pnv-php: Wrap warnings in macro
2025-08-28 16:21:22 +02:00
perf: arm_pmu: Don't disable counter in armpmu_add()
2025-05-02 07:39:09 +02:00
phy: core: don't require set_mode() callback for phy_get_mode() to work
2025-06-04 14:32:33 +02:00
pinctrl: sunxi: Fix memory leak on krealloc failure
2025-08-28 16:21:20 +02:00
platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
2025-07-17 18:24:56 +02:00
power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
2025-08-28 16:21:20 +02:00
powercap: call put_device() on an error path in powercap_register_control_type()
2025-04-10 14:29:36 +02:00
pps: fix poll support
2025-08-28 16:21:18 +02:00
ptp: Ensure info->enable callback is always set
2025-03-13 12:43:11 +01:00
pwm: mediatek: Ensure to disable clocks in error path
2025-07-17 18:25:03 +02:00
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
2025-06-27 11:02:56 +01:00
regulator: core: fix NULL dereference on unbind due to stale coupling data
2025-08-28 16:21:17 +02:00
rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
2025-06-27 11:02:48 +01:00
rtc: pcf8563: fix incorrect maximum clock rate handling
2025-08-28 16:21:22 +02:00
scsi: s390: zfcp: Ensure synchronous unit_add
2025-06-27 11:02:56 +01:00
scsi: isci: Fix dma_unmap_sg() nents value
2025-08-28 16:21:21 +02:00
slimbus: messaging: Free transaction ID in delayed interrupt scenario
2025-03-13 12:43:33 +01:00
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
2025-08-28 16:21:15 +02:00
soundwire: stream: restore params when prepare ports fail
2025-08-28 16:21:21 +02:00
spi: spi-fsl-dspi: Clear completion counter before initiating transfer
2025-07-17 18:25:00 +02:00
staging: nvec: Fix incorrect null termination of battery manufacturer
2025-08-28 16:21:19 +02:00
scsi: target: iscsi: Fix timeout on deleted connection
2025-06-04 14:32:29 +02:00
tee: Prevent size calculation wraparound on 32-bit kernels
2025-06-27 11:02:55 +01:00
thermal/drivers/rockchip: Add missing rk3328 mapping entry
2025-05-02 07:39:16 +02:00
thunderbolt: Do not double dequeue a configuration request
2025-06-27 11:02:44 +01:00
pch_uart: Fix dma_sync_sg_for_device() nents value
2025-08-28 16:21:14 +02:00
uio_hv_generic: Use correct size for interrupt and monitor pages
2025-06-27 11:02:52 +01:00
usb: gadget : fix use-after-free in composite_dev_cleanup()
2025-08-28 16:21:23 +02:00
vfio/pci: Enable iowrite64 and ioread64 for vfio pci
2025-03-13 12:43:13 +01:00
fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
2025-08-28 16:21:21 +02:00
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
2025-08-28 16:21:21 +02:00
xen/swiotlb: relax alignment requirements
2025-06-04 14:32:37 +02:00
944474274e