Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Dan Carpenter 125b4a5345 staging: greybus: use after free in gb_audio_manager_remove_all() ... commit b7db58105b80fa9232719c8329b995b3addfab55 upstream. When we call kobject_put() and it's the last reference to the kobject then it calls gb_audio_module_release() and frees module. We dereference "module" on the next line which is a use after free. Fixes: c77f85bbc9 ("greybus: audio: Fix incorrect counting of 'ida'") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Viresh Kumar <viresh.kumar@linaro.org> Reviewed-by: Vaibhav Agarwal <vaibhav.sr@gmail.com> Link: https://lore.kernel.org/r/20200205123217.jreendkyxulqsool@kili.mountain Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-02-28 17:22:26 +01:00
..
accessibility
acpi	ACPI: PM: s2idle: Check fixed wakeup events in acpi_s2idle_wake()	2020-02-28 17:22:20 +01:00
amba
android	binder: fix log spam for existing debugfs file creation.	2020-02-01 09:34:35 +00:00
ata
atm	fore200e: Fix incorrect checks of NULL pointer dereference	2020-02-24 08:36:36 +01:00
auxdisplay
base	driver core: platform: fix u32 greater or equal to zero comparison	2020-02-24 08:36:55 +01:00
bcma
block	floppy: check FDC index for errors before assigning it	2020-02-28 17:22:14 +01:00
bluetooth	Bluetooth: btusb: Disable runtime suspend on Realtek devices	2020-02-11 04:35:09 -08:00
bus	bus: ti-sysc: Implement quirk handling for CLKDM_NOAUTO	2020-02-24 08:36:35 +01:00
cdrom
char	tpm: Initialize crypto_id of allocated_banks to HASH_ALGO__LAST	2020-02-28 17:22:13 +01:00
clk	clk: uniphier: Add SCSSI clock gate for each channel	2020-02-24 08:36:42 +01:00
clocksource	clocksource: davinci: only enable clockevents once tim34 is initialized	2020-02-24 08:36:46 +01:00
connector
counter
cpufreq	cpufreq: Avoid creating excessively large stack frames	2020-02-11 04:35:25 -08:00
cpuidle	cpuidle: teo: Avoid using "early hits" incorrectly	2020-02-05 21:22:52 +00:00
crypto	crypto: chtls - Fixed memory leak	2020-02-24 08:36:40 +01:00
dax
dca
devfreq	PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency	2020-02-24 08:36:41 +01:00
dio
dma	Revert "dmaengine: imx-sdma: Fix memory leak"	2020-02-28 17:22:24 +01:00
dma-buf
edac	EDAC/sifive: Fix return value check in ecc_register()	2020-02-24 08:36:51 +01:00
eisa
extcon	extcon-intel-cht-wc: Don't reset USB data connection at probe	2020-02-01 09:34:46 +00:00
firewire
firmware
fpga
fsi
gnss
gpio	gpiolib: Set lockdep class for hierarchical irq domains	2020-02-24 08:36:49 +01:00
gpu	drm/msm/dpu: fix BGR565 vs RGB565 confusion	2020-02-28 17:22:25 +01:00
greybus
hid	HID: steam: Fix input device disappearing	2020-02-01 09:34:46 +00:00
hsi
hv	hv_balloon: Balloon up according to request page number	2020-02-11 04:35:21 -08:00
hwmon	hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions.	2020-02-19 19:53:07 +01:00
hwspinlock
hwtracing
i2c
i3c
ide	ide: serverworks: potential overflow in svwks_set_pio_mode()	2020-02-24 08:36:53 +01:00
idle
iio	iio: st_gyro: Correct data for LSM9DS0 gyro	2020-02-01 09:34:36 +00:00
infiniband	scsi: Revert "RDMA/isert: Fix a recently introduced regression related to logout"	2020-02-28 17:22:25 +01:00
input	Input: edt-ft5x06 - work around first register access error	2020-02-24 08:36:45 +01:00
interconnect
iommu	iommu/qcom: Fix bogus detach logic	2020-02-28 17:22:12 +01:00
ipack
irqchip	irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building INVALL	2020-02-24 08:37:01 +01:00
isdn
leds	leds: pca963x: Fix open-drain initialization	2020-02-24 08:36:24 +01:00
lightnvm
macintosh
mailbox
mcb
md	bcache: properly initialize 'path' and 'err' in register_bcache()	2020-02-24 08:37:03 +01:00
media	media: uvcvideo: Add a quirk to force GEO GC6500 Camera bits-per-pixel value	2020-02-24 08:36:56 +01:00
memory
memstick
message
mfd	mfd: max77650: Select REGMAP_IRQ in Kconfig	2020-02-14 16:34:19 -05:00
misc	misc: xilinx_sdfec: fix xsdfec_poll()'s return type	2020-02-24 08:36:47 +01:00
mmc	mmc: core: Rework wp-gpio handling	2020-02-19 19:53:10 +01:00
mtd	mtd: sharpslpart: Fix unsigned comparison to zero	2020-02-14 16:34:18 -05:00
mux
net	e1000e: Use rtnl_lock to prevent race conditions between net and pci/pm	2020-02-28 17:22:14 +01:00
nfc	NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu().	2020-02-24 08:36:33 +01:00
ntb
nubus
nvdimm
nvme	nvme-multipath: Fix memory leak with ana_log_buf	2020-02-28 17:22:20 +01:00
nvmem	nvmem: core: fix memory abort in cleanup path	2020-02-11 04:35:21 -08:00
of	of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc	2020-02-11 04:35:25 -08:00
opp	opp: Free static OPPs on errors while adding them	2020-02-24 08:36:34 +01:00
oprofile
parisc
parport
pci	PCI: Add DMA alias quirk for PLX PEX NTB	2020-02-24 08:36:37 +01:00
pcmcia
perf	perf/imx_ddr: Fix cpu hotplug state cleanup	2020-02-24 08:36:49 +01:00
phy	phy: qualcomm: Adjust indentation in read_poll_timeout	2020-02-11 04:35:45 -08:00
pinctrl	pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs	2020-02-24 08:36:41 +01:00
platform	platform/x86: intel_mid_powerbtn: Take a copy of ddata	2020-02-14 16:34:12 -05:00
pnp
power	power: supply: ltc2941-battery-gauge: fix use-after-free	2020-02-11 04:35:24 -08:00
powercap
pps
ps3
ptp
pwm	pwm: Remove set but not set variable 'pwm'	2020-02-24 08:36:53 +01:00
rapidio
ras
regulator	regulator: core: Fix exported symbols to the exported GPL version	2020-02-24 08:36:54 +01:00
remoteproc	remoteproc: Initialize rproc_class before use	2020-02-24 08:36:54 +01:00
reset	reset: uniphier: Add SCSSI reset control for each channel	2020-02-24 08:36:41 +01:00
rpmsg
rtc	rtc: Kconfig: select REGMAP_I2C when necessary	2020-02-24 08:37:03 +01:00
s390	s390/pkey: fix missing length of protected key on return	2020-02-19 19:53:04 +01:00
sbus
scsi	scsi: iscsi: Don't destroy session if there are outstanding connections	2020-02-24 08:36:50 +01:00
sfi
sh
siox
slimbus
soc	soc/tegra: fuse: Correct straps' address for older Tegra124 device trees	2020-02-24 08:36:45 +01:00
soundwire
spi	spi: spi-fsl-qspi: Ensure width is respected in spi-mem operations	2020-02-24 08:36:54 +01:00
spmi	spmi: pmic-arb: Set lockdep class for hierarchical irq domains	2020-02-19 19:53:07 +01:00
ssb
staging	staging: greybus: use after free in gb_audio_manager_remove_all()	2020-02-28 17:22:26 +01:00
target	scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session"	2020-02-28 17:22:25 +01:00
tc
tee	tee: optee: Fix compilation issue with nommu	2020-02-05 21:22:49 +00:00
thermal
thunderbolt	thunderbolt: Prevent crash if non-active NVMem file is read	2020-02-28 17:22:13 +01:00
tty	serdev: ttyport: restore client ops on deregistration	2020-02-28 17:22:19 +01:00
uio	uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol()	2020-02-24 08:36:27 +01:00
usb	usb: dwc2: Fix in ISOC request length checking	2020-02-28 17:22:26 +01:00
vfio	vfio/spapr/nvlink2: Skip unpinning pages on error exit	2020-02-24 08:36:43 +01:00
vhost
video	pxa168fb: Fix the function used to release some memory in an error handling path	2020-02-24 08:36:25 +01:00
virt
virtio	virtio_balloon: prevent pfn array overflow	2020-02-24 08:37:03 +01:00
visorbus	visorbus: fix uninitialized variable access	2020-02-24 08:36:47 +01:00
vlynq
vme	vme: bridges: reduce stack usage	2020-02-24 08:36:48 +01:00
w1
watchdog	drivers: watchdog: stm32_iwdg: set WDOG_HW_RUNNING at probe	2020-02-14 16:34:18 -05:00
xen	xen/balloon: Support xend-based toolstack take two	2020-02-11 04:35:36 -08:00
zorro
Kconfig
Makefile