Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Santosh Sakore c2adf7dc3f msm:adsprpc: Fix UAF of ctx->perf in async invoke perf counter ... In async invoke path, fastrpc_update_invoke_count is called at invoke_end with perf_counter pointing into ctx->perf. After fastrpc_invoke_send returns, the async response thread may call context_free(ctx), freeing ctx->perf before invoke_end. This causes a use-after-free write that corrupts the SLUB freelist and may trigger a kernel panic on next allocation. Fix by storing submission timestamp in ctx->invoke_start_time before send, removing unsafe call from invoke_end, and moving fastrpc_update_invoke_count to fastrpc_wait_on_async_queue. There, ctx is guaranteed valid before context_free. This also aligns async perf->invoke with sync, measuring full end-to-end latency instead of submission-only latency. Acked-by: Sharad Kumar <sharku@qti.qualcomm.com> Change-Id: I91f2a2479b508fde2fe7c26783ee56dc9391eb17 Signed-off-by: Santosh Sakore <ssakore@qti.qualcomm.com>		2026-06-05 12:18:57 +05:30
..
accessibility
acpi	This is the 5.4.302 stable release	2025-12-11 09:41:30 +00:00
amba
android	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
ata	ata: libata-scsi: Fix system suspend for a security locked drive	2025-12-03 12:45:21 +01:00
atm	atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().	2025-09-04 14:05:54 +02:00
auxdisplay
base	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
bcma
block	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
bluetooth	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
bus	Merge android11-5.4.295(387dbb9) into msm-5.4	2025-09-29 05:22:53 -07:00
cdrom
char	msm:adsprpc: Fix UAF of ctx->perf in async invoke perf counter	2026-06-05 12:18:57 +05:30
clk	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
clocksource	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
connector
counter	counter: stm32-lptimer-cnt: fix error handling when enabling	2025-04-10 14:29:39 +02:00
cpufreq	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
cpuidle	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
crypto	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
dax
dca
devfreq
dio
dma	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
dma-buf	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
edac	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
eisa
extcon	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
firewire
firmware	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
fpga	fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()	2025-08-28 16:21:32 +02:00
fsi
gnss
gpio	gpio: pca953x: fix IRQ storm on system wake up	2025-09-09 18:44:00 +02:00
gpu	Merge "msm:kgsl: Prevent sign extension on alignments"	2026-02-02 01:24:39 -08:00
greybus
hid	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
hsi	HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition	2025-05-02 07:39:18 +02:00
hv	Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()	2025-04-10 14:29:35 +02:00
hwmon	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
hwspinlock
hwtracing	Merge android11-5.4.295(387dbb9) into msm-5.4	2025-09-29 05:22:53 -07:00
i2c	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
i3c	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
ide
idle
iio	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
infiniband	This is the 5.4.301 stable release	2025-10-30 07:52:10 +00:00
input	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
interconnect
iommu	Merge android11-5.4.295(387dbb9) into msm-5.4	2025-09-29 05:22:53 -07:00
ipack
irqchip	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
isdn	isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()	2025-12-03 12:45:19 +01:00
leds	Merge android11-5.4.295(387dbb9) into msm-5.4	2025-09-29 05:22:53 -07:00
lightnvm
macintosh
mailbox	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
mcb	mcb: fix a double free bug in chameleon_parse_gdd()	2025-05-02 07:39:26 +02:00
md	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
media	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
memory	memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe	2025-10-29 14:00:00 +01:00
memstick	memstick: Add timeout to prevent indefinite waiting	2025-12-03 12:45:06 +01:00
message
mfd	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
misc	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
mmc	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
mtd	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
mux
net	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
nfc	Merge android11-5.4.289(4c8fb32) into msm-5.4	2025-03-26 11:56:22 +05:30
ntb	ntb: reduce stack usage in idt_scan_mws	2025-05-02 07:39:28 +02:00
nubus
nvdimm	libnvdimm/labels: Fix divide error in nd_label_data_init()	2025-06-04 14:32:30 +02:00
nvme	nvmet-tcp: don't restore null sk_state_change	2025-06-04 14:32:35 +02:00
nvmem	Merge android11-5.4.295(387dbb9) into msm-5.4	2025-09-29 05:22:53 -07:00
of	Merge android11-5.4.295(387dbb9) into msm-5.4	2025-09-29 05:22:53 -07:00
opp
oprofile
parisc
parport
pci	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
pcmcia	pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch	2025-10-02 13:34:30 +02:00
perf	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
phy	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
pinctrl	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
platform	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
pnp
power	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
powercap	powercap: call put_device() on an error path in powercap_register_control_type()	2025-04-10 14:29:36 +02:00
pps	pps: fix warning in pps_register_cdev when register device fail	2025-10-29 13:59:48 +01:00
ps3
ptp
pwm	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
rapidio	drivers/rapidio/rio_cm.c: prevent possible heap overwrite	2025-06-27 11:02:56 +01:00
ras
regulator	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
remoteproc	This is the 5.4.302 stable release	2025-12-11 09:41:30 +00:00
reset
rpmsg	Merge android11-5.4.295(387dbb9) into msm-5.4	2025-09-29 05:22:53 -07:00
rtc	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
s390	s390/ctcm: Fix double-kfree	2025-12-03 12:45:20 +01:00
sbus
scsi	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
sfi
sh
siox
slimbus	Merge android11-5.4.295(387dbb9) into msm-5.4	2025-09-29 05:22:53 -07:00
soc	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
soundwire	soundwire: stream: restore params when prepare ports fail	2025-08-28 16:21:21 +02:00
spi	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
spmi
ssb
staging	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
target	This is the 5.4.302 stable release	2025-12-11 09:41:30 +00:00
tc
tee	tee: allow a driver to allocate a tee_device without a pool	2025-12-03 12:45:07 +01:00
thermal	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
thunderbolt	thunderbolt: Fix copy+paste error in match_service_id()	2025-08-28 16:21:30 +02:00
tty	tty: msm: Update timer handling for interrupt-safe context	2026-04-30 02:31:25 -07:00
uio	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
usb	reverting all USB patches	2026-01-12 14:14:56 +05:30
vfio	This is the 5.4.291 stable release	2025-03-13 14:53:52 +00:00
vhost	This is the 5.4.298 stable release	2025-09-05 06:54:24 +00:00
video	Merge android11-5.4.302(91d385eb) into msm-5.4	2026-01-30 11:41:11 +05:30
virt
virtio
visorbus
vlynq
vme
w1
watchdog	watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog	2025-10-29 13:59:48 +01:00
xen	xen/events: Update virq_to_irq on migration	2025-10-29 13:59:56 +01:00
zorro
Kconfig
Makefile
OWNERS