mirrors/linux-stable
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2024-10-03 23:58:05 +00:00
Code Issues Releases Wiki Activity
linux-stable/drivers
History
Dan Carpenter 13b69e2dfd mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() 
[ Upstream commit 26783d74cc ]

The "req" struct is always added to the "wm831x->auxadc_pending" list,
but it's only removed from the list on the success path.  If a failure
occurs then the "req" struct is freed but it's still on the list,
leading to a use after free.

Fixes: 78bb3688ea ("mfd: Support multiple active WM831x AUXADC conversions")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Charles Keepax <ckeepax@opensource.cirrus.com>
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-03-03 18:22:47 +01:00
..
accessibility
acpi ACPI: thermal: Do not call acpi_thermal_check() directly 2021-02-07 14:47:40 +01:00
amba amba: Fix resource leak for drivers without .remove 2021-03-03 18:22:46 +01:00
android binder: fix UAF when releasing todo list 2020-10-29 09:06:59 +01:00
ata ata: ahci_brcm: Add back regulators management 2021-03-03 18:22:43 +01:00
atm atm: idt77252: call pci_disable_device() on error path 2021-01-12 20:09:06 +01:00
auxdisplay auxdisplay: ht16k33: Fix refresh rate handling 2021-03-03 18:22:46 +01:00
base driver core: Extend device_is_dependent() 2021-02-07 14:47:40 +01:00
bcma
block xen-blkback: fix error handling in xen_blkbk_map() 2021-02-23 14:00:34 +01:00
bluetooth Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function 2021-03-03 18:22:37 +01:00
bus mips: cdmm: fix use-after-free in mips_cdmm_bus_discover 2020-12-29 13:46:56 +01:00
cdrom
char hwrng: timeriomem - Fix cooldown period calculation 2021-03-03 18:22:43 +01:00
clk clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL 2021-03-03 18:22:44 +01:00
clocksource clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined 2021-03-03 18:22:45 +01:00
connector
cpufreq cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove() 2021-03-03 18:22:38 +01:00
cpuidle cpuidle: Fixup IRQ state 2020-09-09 19:03:06 +02:00
crypto crypto: bcm - Rename struct device_private to bcm_device_private 2021-03-03 18:22:42 +01:00
dax
dca
devfreq PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out 2020-10-01 13:12:28 +02:00
dio
dma dmaengine: hsu: disable spurious interrupt 2021-03-03 18:22:45 +01:00
dma-buf
edac EDAC/amd64: Fix PCI component registration 2020-12-29 13:47:06 +01:00
eisa
extcon extcon: max77693: Fix modalias string 2020-12-29 13:47:01 +01:00
firewire
firmware
fmc
fpga
fsi
gpio gpio: mvebu: fix pwm .get_state period calculation 2021-01-30 13:31:15 +01:00
gpu gma500: clean up error handling in init 2021-03-03 18:22:41 +01:00
hid HID: core: detect and skip invalid inputs to snto32() 2021-03-03 18:22:44 +01:00
hsi HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() 2020-12-29 13:46:56 +01:00
hv Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() 2021-03-03 18:22:43 +01:00
hwmon hwmon: (applesmc) check status earlier. 2020-09-09 19:03:06 +02:00
hwspinlock
hwtracing stm class: Fix module init return on allocation failure 2021-01-30 13:31:14 +01:00
i2c i2c: stm32f7: fix configuration of the digital filter 2021-02-23 14:00:33 +01:00
ide scsi: ide: Do not set the RQF_PREEMPT flag for sense requests 2021-01-12 20:09:05 +01:00
idle
iio iio: ad5504: Fix setting power-down state 2021-01-30 13:31:13 +01:00
infiniband RDMA/rxe: Fix coding error in rxe_recv.c 2021-03-03 18:22:47 +01:00
input Input: xpad - sync supported devices with fork on GitHub 2021-02-10 09:12:10 +01:00
iommu iommu/vt-d: Do not use flush-queue when caching-mode is on 2021-02-10 09:12:10 +01:00
ipack
irqchip irqchip/mips-cpu: Set IPI domain parent chip 2021-01-30 13:31:13 +01:00
isdn misdn: dsp: select CONFIG_BITREVERSE 2021-01-23 15:48:42 +01:00
leds leds: trigger: fix potential deadlock with libata 2021-02-03 23:22:21 +01:00
lightnvm
macintosh
mailbox mailbox: avoid timer start from callback 2020-10-29 09:07:11 +01:00
mcb
md dm: avoid filesystem lookup in dm_get_dev_t() 2021-01-30 13:31:12 +01:00
media media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values 2021-03-03 18:22:42 +01:00
memory memory: emif: Remove bogus debugfs error handling 2020-11-05 11:06:57 +01:00
memstick memstick: r592: Fix error return in r592_probe() 2020-12-29 13:46:58 +01:00
message scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() 2020-11-05 11:06:59 +01:00
mfd mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() 2021-03-03 18:22:47 +01:00
misc misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() 2021-01-09 13:37:38 +01:00
mmc mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe 2021-03-03 18:22:46 +01:00
mtd spi: cadence-quadspi: Abort read if dummy cycles required are too many 2021-03-03 18:22:44 +01:00
mux
net net: mvneta: Remove per-cpu queue mapping for Armada 3700 2021-03-03 18:22:40 +01:00
nfc nfc: s3fwrn5: Release the nfc firmware 2020-12-29 13:47:02 +01:00
ntb NTB: hw: amd: fix an issue about leak system resources 2020-10-29 09:07:14 +01:00
nubus
nvdimm libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels 2020-12-29 13:47:11 +01:00
nvme nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs 2021-02-10 09:12:09 +01:00
nvmem
of of/fdt: Make sure no-map does not remove already reserved regions 2021-03-03 18:22:45 +01:00
oprofile
parisc parisc: mask out enable and reserved bits from sba imask 2020-08-21 09:48:16 +02:00
parport
pci PCI: Fix pci_slot_release() NULL pointer dereference 2020-12-29 13:47:11 +01:00
pcmcia
perf drivers/perf: xgene_pmu: Fix uninitialized resource struct 2020-10-29 09:07:00 +01:00
phy phy: cpcap-usb: Fix warning for missing regulator_disable 2021-02-07 14:47:40 +01:00
pinctrl pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() 2020-12-29 13:46:58 +01:00
platform platform/x86: hp-wmi: Disable tablet-mode reporting by default 2021-02-23 14:00:31 +01:00
pnp
power power: reset: at91-sama5d2_shdwc: fix wkupdbc mask 2021-03-03 18:22:45 +01:00
powercap powercap: restrict energy meter to root access 2020-11-10 21:10:28 +01:00
pps
ps3 powerpc/ps3: use dma_mapping_error() 2020-12-29 13:47:02 +01:00
ptp
pwm pwm: lp3943: Dynamically allocate PWM chip base 2020-12-29 13:47:03 +01:00
rapidio rapidio: fix the missed put_device() for rio_mport_add_riodev 2020-10-29 09:07:11 +01:00
ras
regulator regulator: axp20x: Fix reference cout leak 2021-03-03 18:22:45 +01:00
remoteproc remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load 2021-02-23 14:00:29 +01:00
reset
rpmsg
rtc rtc: s5m: select REGMAP_I2C 2021-03-03 18:22:45 +01:00
s390 s390/dasd: fix hanging device offline processing 2021-01-09 13:37:37 +01:00
sbus
scsi scsi: qla2xxx: Fix crash during driver load on big endian machines 2021-02-23 14:00:34 +01:00
sfi
sh
sn
soc drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] 2021-02-03 23:22:21 +01:00
spi spi: stm32: properly handle 0 byte transfer 2021-03-03 18:22:47 +01:00
spmi
ssb
staging staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules 2021-03-03 18:22:39 +01:00
target scsi: target: Fix XCOPY NAA identifier lookup 2021-01-12 20:09:14 +01:00
tc
tee
thermal thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 2020-09-09 19:03:10 +02:00
thunderbolt thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() 2020-11-18 18:27:58 +01:00
tty serial_core: Check for port state when tty is in error state 2020-12-29 13:46:49 +01:00
uio uio: Fix use-after-free in uio_unregister_device() 2020-11-18 18:27:58 +01:00
usb usb: dwc2: Make "trimming xfer length" a debug message 2021-03-03 18:22:39 +01:00
uwb
vfio vfio/pci: Move dummy_resources_list init in vfio_pci_probe() 2021-01-09 13:37:37 +01:00
vhost vhost_net: fix ubuf refcount incorrectly when sendmsg fails 2021-01-12 20:09:08 +01:00
video fbdev: aty: SPARC64 requires FB_ATY_CT 2021-03-03 18:22:40 +01:00
virt drivers/virt/fsl_hypervisor: Fix error handling path 2020-10-29 09:07:05 +01:00
virtio virtio_ring: Avoid loop when vq is broken in virtqueue_poll 2020-08-26 10:29:57 +02:00
vlynq
vme
w1 w1: mxc_w1: Fix timeout resolution problem leading to bus error 2020-11-05 11:06:59 +01:00
watchdog watchdog: coh901327: add COMMON_CLK dependency 2020-12-29 13:47:02 +01:00
xen xen-scsiback: don't "handle" error by BUG() 2021-02-23 14:00:34 +01:00
zorro
Kconfig
Makefile