android_kernel_motorola_sm6375/drivers/char
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Santosh Sakore c6635960b2 adsprpc: Handle UAF scenario in put_args
Currently, the DSP updates header buffers with unused DMA handle fds.
In the put_args section, if any DMA handle FDs are present in the
header buffer, the corresponding map is freed. However, since the
header buffer is exposed to users in unsigned PD, users can update
invalid FDs. If this invalid FD matches with any FD that is already
in use, it could lead to a use-after-free (UAF) vulnerability.
As a solution,add DMA handle references for DMA FDs, and the map for
the FD will be freed only when a reference is found.

Acked-by: Om Deore <quic_odeore@quicinc.com>
Change-Id: I19ae21230bf11fe89858b10c9069a5daccabc392
Signed-off-by: Santosh Sakore <quic_ssakore@quicinc.com>
(cherry picked from commit c6e7698c0c)
2024-09-13 20:37:48 -07:00
..
agp Merge 1d28224d49 ("selftests/ftrace: Correctly enable event in instance-event.tc") into android11-5.4-lts 2023-10-24 16:45:58 +00:00
hw_random Merge android11-5.4.274 (564901b) into msm-5.4 2024-07-24 20:38:43 -07:00
ipmi ipmi_si: fix a memleak in try_smi_init() 2023-09-23 10:59:54 +02:00
mwave
pcmcia
tpm tpm_tis: Resend command to recover from data transfer errors 2023-09-23 11:00:03 +02:00
virtio_eavb char: virtio_eavb: use new update_marker api 2023-08-15 11:24:49 +05:30
xilinx_hwicap
xillybus
adi.c
adsprpc.c adsprpc: Handle UAF scenario in put_args 2024-09-13 20:37:48 -07:00
adsprpc_compat.c
adsprpc_compat.h
adsprpc_shared.h msm: adsprpc: fix UAF process init_mem 2022-09-21 11:13:42 +05:30
apm-emulation.c
applicom.c
applicom.h
bsr.c
ds1620.c
dsp56k.c
dtlk.c
efirtc.c
fastcvpd.c
hangcheck-timer.c
hpet.c
Kconfig Merge android11-5.4.210+ (7e6cbbe) into msm-5.4 2022-10-14 12:09:01 +05:30
lp.c
Makefile
mem.c random: restore O_NONBLOCK support 2022-10-15 07:54:40 +02:00
misc.c
msm_smd_pkt.c
mspec.c
nsc_gpio.c
nvram.c
nwbutton.c
nwbutton.h
nwflash.c
pc8736x_gpio.c
powernv-op-panel.c
ppdev.c
ps3flash.c
random.c This is the 5.4.218 stable release 2022-10-15 08:28:04 +02:00
raw.c
rdbg.c
rtc.c
scx200_gpio.c
sonypi.c
tb0219.c
tlclk.c
toshiba.c
ttyprintk.c
uv_mmtimer.c
virtio_console.c
virtio_fastrpc.c