Oliver Neukum
84f2e5b3e7
usb: aqc111: check packet for fixup for true limit ...
[ Upstream commit ccab434e674ca95d483788b1895a70c21b7f016a ]
If a device sends a packet that is inbetween 0
and sizeof(u64) the value passed to skb_trim()
as length will wrap around ending up as some very
large value.
The driver will then proceed to parse the header
located at that position, which will either oops or
process some random value.
The fix is to check against sizeof(u64) rather than
0, which the driver currently does. The issue exists
since the introduction of the driver.
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-12-20 15:41:19 +01:00
ACPI/IORT: Make iort_msi_map_rid() PCI agnostic
2023-12-13 18:18:10 +01:00
amba: bus: fix refcount leak
2023-09-23 10:59:52 +02:00
ata: pata_isapnp: Add missing error check for devm_ioport_map()
2023-12-08 08:44:23 +01:00
atm: solos-pci: Fix potential deadlock on &tx_queue_lock
2023-12-20 15:41:15 +01:00
devcoredump: Send uevent once devcd is ready
2023-12-13 18:18:18 +01:00
remove the sx8 block driver
2023-11-08 11:23:42 +01:00
Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE
2023-11-28 16:50:20 +00:00
bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up
2023-10-10 21:46:39 +02:00
hwrng: geode - fix accessing registers
2023-11-20 10:30:12 +01:00
clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks
2023-11-28 16:50:19 +00:00
clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware
2023-11-28 16:50:13 +00:00
cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
2023-12-08 08:44:28 +01:00
crypto: caam/jr - fix Chacha20 + Poly1305 self test failure
2023-11-20 10:30:12 +01:00
PM / devfreq: Fix leak in devfreq_dev_release()
2023-09-23 10:59:54 +02:00
dmaengine: stm32-mdma: correct desc prep when channel running
2023-11-28 16:50:19 +00:00
dma-buf/sw_sync: Avoid recursive lock during fence signal
2023-08-30 16:27:28 +02:00
firewire: core: fix possible memory leak in create_units()
2023-12-08 08:44:26 +01:00
firmware: ti_sci: Mark driver as non removable
2023-11-20 10:30:12 +01:00
fsi: master-ast-cf: Add MODULE_FIRMWARE macro
2023-09-23 10:59:37 +02:00
gpiolib: sysfs: Fix error handling on failed export
2023-12-13 18:18:15 +01:00
drm/amdgpu: correct chunk_ptr to a pointer to chunk.
2023-12-13 18:18:10 +01:00
HID: fix HID device resource race between HID core and debugging support
2023-12-08 08:44:23 +01:00
hwmon: (acpi_power_meter) Fix 4.29 MW bug
2023-12-13 18:18:13 +01:00
coresight: tmc: Explicit type conversions to prevent integer overflow
2023-09-23 10:59:50 +02:00
i2c: i801: fix potential race in i801_block_transaction_byte_by_byte
2023-11-28 16:50:21 +00:00
i3c: master: cdns: Fix reading status register
2023-11-28 16:50:19 +00:00
iio: exynos-adc: request second interupt only when touchscreen mode is used
2023-11-08 11:23:36 +01:00
RDMA/bnxt_re: Correct module description string
2023-12-13 18:18:13 +01:00
Input: xpad - add HyperX Clutch Gladiate Support
2023-12-08 08:44:27 +01:00
interconnect: Do not skip aggregation for disabled paths
2023-08-30 16:27:27 +02:00
of/iommu: Make of_map_rid() PCI agnostic
2023-12-13 18:18:11 +01:00
firmware: ti_sci: Replace HTTP links with HTTPS ones
2023-11-20 10:30:12 +01:00
leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu'
2023-11-20 10:30:13 +01:00
mcb: fix error handling for different scenarios when parsing
2023-11-28 16:50:19 +00:00
bcache: revert replacing IS_ERR_OR_NULL with IS_ERR
2023-12-08 08:44:26 +01:00
media: venus: hfi: add checks to handle capabilities from firmware
2023-11-28 16:50:21 +00:00
mfd: dln2: Fix double put in dln2_probe
2023-11-20 10:30:13 +01:00
misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()
2023-11-20 10:30:13 +01:00
mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled
2023-12-13 18:18:15 +01:00
mtd: cfi_cmdset_0001: Byte swap OTP info
2023-12-08 08:44:27 +01:00
usb: aqc111: check packet for fixup for true limit
2023-12-20 15:41:19 +01:00
ntb: Fix calculation ntb_transport_tx_free_entry()
2023-09-23 10:59:55 +02:00
nd_btt: Make BTT lanes preemptible
2023-11-20 10:30:12 +01:00
nvmet: nul-terminate the NQNs passed in the connect command
2023-12-08 08:44:24 +01:00
nvmem: imx: correct nregs for i.MX6UL
2023-11-08 11:23:37 +01:00
of: dynamic: Fix of_reconfig_get_state_change() return value documentation
2023-12-13 18:18:11 +01:00
OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
2023-09-23 10:59:40 +02:00
parisc: iosapic.c: Fix sparse warnings
2023-10-10 21:46:39 +02:00
parport: Add support for Brainboxes IX/UC/PX parallel cards
2023-12-13 18:18:15 +01:00
Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
2023-12-20 15:41:19 +01:00
pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
2023-11-20 10:30:14 +01:00
perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
2023-09-23 11:00:03 +02:00
phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
2023-10-25 11:53:25 +02:00
pinctrl: avoid reload of p state in list iteration
2023-12-08 08:44:26 +01:00
platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e
2023-11-28 16:50:14 +00:00
ptp: annotate data-race around q->head and q->tail
2023-11-28 16:50:16 +00:00
pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
2023-11-20 10:30:15 +01:00
regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()"
2023-10-25 11:53:23 +02:00
firmware: ti_sci: Replace HTTP links with HTTPS ones
2023-11-20 10:30:12 +01:00
rpmsg: Fix possible refcount leak in rpmsg_register_device_override()
2023-11-08 11:23:40 +01:00
rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
2023-11-20 10:30:14 +01:00
s390/dasd: protect device queue against concurrent access
2023-12-08 08:44:25 +01:00
scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()
2023-12-13 18:18:13 +01:00
soc: qcom: llcc: Handle a second device without data corruption
2023-11-20 10:30:12 +01:00
spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies
2023-11-20 10:30:16 +01:00
staging: rtl8712: fix race condition
2023-09-23 10:59:37 +02:00
scsi: target: core: Fix deadlock due to recursive locking
2023-10-10 21:46:43 +02:00
thermal: core: prevent potential string overflow
2023-11-20 10:30:09 +01:00
serial: 8250_omap: Add earlycon support for the AM654 UART controller
2023-12-13 18:18:16 +01:00
usb: typec: class: fix typec_altmode_put_partner to put plugs
2023-12-13 18:18:16 +01:00
fbdev: stifb: Make the STI next font pointer a 32-bit signed offset
2023-12-08 08:44:27 +01:00
virtio-mmio: fix memory leak of vm_dev
2023-11-08 11:23:34 +01:00
watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running
2023-10-10 21:46:40 +02:00
xen/events: fix delayed eoi list handling
2023-11-28 16:50:16 +00:00
84f2e5b3e7