linux-stable/drivers
Andrew Ballance 5c117d5936 hid: asus: asus_report_fixup: fix potential read out of bounds
commit 89e1ee118d upstream.

syzbot reported a potential read out of bounds in asus_report_fixup.

this patch adds checks so that a read out of bounds will not occur

Signed-off-by: Andrew Ballance <andrewjballance@gmail.com>
Reported-by:  <syzbot+07762f019fd03d01f04c@syzkaller.appspotmail.com>
Closes: https://syzkaller.appspot.com/bug?extid=07762f019fd03d01f04c
Fixes: 59d2f5b739 ("HID: asus: fix more n-key report descriptors if n-key quirked")
Link: https://lore.kernel.org/r/20240602085023.1720492-1-andrewjballance@gmail.com
Signed-off-by: Benjamin Tissoires <bentiss@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-06-27 13:52:32 +02:00
..
accel accel/ivpu: Fix deadlock in context_xa 2024-04-08 10:55:01 +02:00
accessibility speakup: Fix sizeof() vs ARRAY_SIZE() bug 2024-05-30 09:43:58 +02:00
acpi ACPI: EC: Evaluate orphan _REG under EC device 2024-06-27 13:52:26 +02:00
amba
android binder: fix max_thread type inconsistency 2024-05-25 16:30:54 +02:00
ata ata: ahci: Do not enable LPM if no LPM states are supported by the HBA 2024-06-27 13:52:29 +02:00
atm atm: fore200e: Convert to platform remove callback returning void 2024-03-07 20:36:32 -08:00
auxdisplay auxdisplay: charlcd: Don't rebuild when CONFIG_PANEL_BOOT_MESSAGE=y 2024-04-11 13:34:29 +03:00
base drivers: core: synchronize really_probe() and dev_uevent() 2024-06-21 14:40:28 +02:00
bcma
block nbd: Fix signal handling 2024-06-27 13:52:31 +02:00
bluetooth Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl 2024-06-27 13:52:15 +02:00
bus Char/Misc and other driver subsystem updates for 6.9-rc1 2024-03-21 13:21:31 -07:00
cache cache: sifive_ccache: Silence unused variable warning 2024-04-11 07:28:37 +01:00
cdrom cdrom: gdrom: Convert to platform remove callback returning void 2024-03-07 11:53:30 -07:00
cdx cdx: add MSI support for CDX bus 2024-03-07 21:52:03 +00:00
char tpm_tis: Do *not* flush uninitialized work 2024-06-16 13:51:06 +02:00
clk clk: sifive: Do not register clkdevs for PRCI clocks 2024-06-21 14:40:17 +02:00
clocksource A set of updates for clocksource and clockevent drivers: 2024-03-23 14:42:45 -07:00
comedi comedi: vmk80xx: fix incomplete endpoint checking 2024-04-11 15:16:23 +02:00
connector
counter
cpufreq cpufreq: amd-pstate: fix memory leak on CPU EPP exit 2024-06-27 13:52:19 +02:00
cpuidle RISC-V Patches for the 6.9 Merge Window 2024-03-22 10:41:13 -07:00
crypto crypto: hisilicon/qm - Add the err memory release process to qm uninit 2024-06-27 13:52:11 +02:00
cxl cxl: Add post-reset warning if reset results in loss of previously committed HDM decoders 2024-06-27 13:52:18 +02:00
dax dax/bus.c: use the right locking mode (read vs write) in size_show 2024-05-30 09:44:59 +02:00
dca
devfreq
dio dio: make dio_bus_type const 2024-03-07 20:37:04 +00:00
dma dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr() 2024-06-27 13:52:29 +02:00
dma-buf dma-buf: handle testing kthreads creation failure 2024-06-21 14:40:33 +02:00
dpll dpll: fix return value check for kmemdup 2024-05-30 09:44:39 +02:00
edac EDAC/igen6: Convert PCIBIOS_* return codes to errnos 2024-06-16 13:51:13 +02:00
eisa
extcon extcon: max8997: select IRQ_DOMAIN instead of depending on it 2024-06-12 11:39:18 +02:00
firewire firewire: ohci: fulfill timestamp for some local asynchronous transaction 2024-04-29 18:41:00 +09:00
firmware efi/x86: Free EFI memory map only when installing a new one. 2024-06-27 13:52:30 +02:00
fpga fpga: region: add owner module and take its refcount 2024-06-12 11:39:13 +02:00
fsi
gnss
gpio gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type 2024-06-21 14:40:18 +02:00
gpu drm/amd/display: revert Exit idle optimizations before HDCP execution 2024-06-27 13:52:32 +02:00
greybus greybus: Fix use-after-free bug in gb_interface_release due to race condition. 2024-06-21 14:40:38 +02:00
hid hid: asus: asus_report_fixup: fix potential read out of bounds 2024-06-27 13:52:32 +02:00
hsi
hte
hv hyperv-fixes for v6.9-rc4 2024-04-11 16:23:56 -07:00
hwmon hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() 2024-06-16 13:51:12 +02:00
hwspinlock hwspinlock: omap: Use index to get hwspinlock pointer 2024-03-05 20:01:14 -08:00
hwtracing intel_th: pci: Add Lunar Lake support 2024-06-21 14:40:37 +02:00
i2c i2c: ocores: set IACK bit after core is enabled 2024-06-27 13:52:30 +02:00
i3c i3c: master: svc: fix invalidate IBI type and miss call client IBI handler 2024-06-16 13:51:12 +02:00
idle cpuidle: ACPI/intel: fix MWAIT hint target C-state computation 2024-03-05 21:25:18 +01:00
iio iio: invensense: fix interrupt timestamp alignment 2024-06-21 14:40:35 +02:00
infiniband RDMA/mlx5: Ensure created mkeys always have a populated rb_key 2024-06-27 13:52:28 +02:00
input Input: cyapa - add missing input core locking to suspend/resume functions 2024-06-12 11:39:31 +02:00
interconnect interconnect: qcom: qcm2290: Fix mas_snoc_bimc QoS port assignment 2024-06-12 11:39:09 +02:00
iommu iommu/arm-smmu-v3: Free MSIs in case of ENOMEM 2024-06-27 13:52:17 +02:00
ipack ipack: make ipack_bus_type const 2024-03-07 20:32:47 +00:00
irqchip irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update() 2024-06-21 14:40:30 +02:00
isdn mISDN: fix MISDN_TIME_STAMP handling 2024-04-09 17:01:01 -07:00
leds leds: class: Revert: "If no default trigger is given, make hw_control trigger the default trigger" 2024-06-21 14:40:27 +02:00
macintosh macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" 2024-05-30 09:44:27 +02:00
mailbox mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown 2024-06-12 11:39:25 +02:00
mcb mcb: constify the struct device_type usage 2024-03-07 20:38:15 +00:00
md dm-integrity: set discard_granularity to logical block size 2024-06-21 14:40:34 +02:00
media media: mtk-vcodec: potential null pointer deference in SCP 2024-06-27 13:52:16 +02:00
memory Char/Misc and other driver subsystem updates for 6.9-rc1 2024-03-21 13:21:31 -07:00
memstick MMC core: 2024-03-13 10:59:28 -07:00
message
mfd TTY/Serial driver update for 6.9-rc1 2024-03-21 12:44:10 -07:00
misc misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe() 2024-06-21 14:40:39 +02:00
mmc mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus T100TA 2024-06-16 13:51:00 +02:00
most most: core: make mostbus const 2024-03-07 20:32:38 +00:00
mtd mtd: rawnand: hynix: fixed typo 2024-05-30 09:44:43 +02:00
mux
net wifi: ath12k: check M3 buffer size as well whey trying to reuse it 2024-06-27 13:52:32 +02:00
nfc NFC: trf7970a: disable all regulators on removal 2024-04-22 14:19:58 -07:00
ntb
nubus
nvdimm libnvdimm updates for v6.9 2024-03-15 11:58:32 -07:00
nvme nvmet-passthru: propagate status from id override functions 2024-06-21 14:40:24 +02:00
nvmem nvmem: core: Print error on wrong bits DT property 2024-03-07 20:21:53 +00:00
of of: module: add buffer overflow check in of_modalias() 2024-05-30 09:45:00 +02:00
opp OPP: Fix required_opp_tables for multiple genpds using same table 2024-06-27 13:52:19 +02:00
parisc parisc: led: Convert to platform remove callback returning void 2024-03-08 10:00:07 +01:00
parport parport: sunbpp: Convert to platform remove callback returning void 2024-03-07 21:50:06 +00:00
pci PCI: Do not wait for disconnected devices when resuming 2024-06-27 13:52:19 +02:00
pcmcia pcmcia: cs: make pcmcia_socket_class constant 2024-03-10 09:07:00 +01:00
peci
perf perf/arm-dmc620: Fix lockdep assert in ->event_init() 2024-06-12 11:39:37 +02:00
phy phy: qcom: qmp-combo: Switch from V6 to V6 N4 register offsets 2024-06-27 13:52:23 +02:00
pinctrl pinctrl: qcom: pinctrl-sm7150: Fix sdc1 and ufs special pins regs 2024-06-12 11:39:16 +02:00
platform platform/x86: p2sb: Don't init until unassigned resources have been assigned 2024-06-27 13:52:16 +02:00
pmdomain OPP: Fix required_opp_tables for multiple genpds using same table 2024-06-27 13:52:19 +02:00
pnp
power power: supply: cros_usbpd: provide ID table for avoiding fallback match 2024-06-27 13:52:16 +02:00
powercap powercap: intel_rapl: Convert to platform remove callback returning void 2024-03-13 20:45:54 +01:00
pps pps: use cflags-y instead of EXTRA_CFLAGS 2024-03-07 21:51:39 +00:00
ps3
ptp ptp: fix integer overflow in max_vclocks_store 2024-06-27 13:52:22 +02:00
pwm pwm: meson: Use mul_u64_u64_div_u64() for frequency calculating 2024-05-30 09:44:28 +02:00
rapidio
ras RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation 2024-06-21 14:40:28 +02:00
regulator regulator: bd71815: fix ramp values 2024-06-27 13:52:24 +02:00
remoteproc remoteproc: k3-r5: Jump to error handling labels in start/stop errors 2024-06-21 14:40:38 +02:00
reset
rpmsg
rtc RTC for 6.9 2024-03-21 17:16:46 -07:00
s390 s390/ap: Fix crash in AP internal function modify_bitmap() 2024-06-16 13:51:11 +02:00
sbus This includes the following changes related to sparc for v6.9: 2024-03-15 12:47:21 -07:00
scsi scsi: core: Introduce the BLIST_SKIP_IO_HINTS flag 2024-06-27 13:52:29 +02:00
sh
siox SIOX changes for 6.9-rc1 2024-03-21 15:18:18 -07:00
slimbus slimbus: qcom-ngd-ctrl: Add timeout for wait operation 2024-05-03 07:30:32 +02:00
soc soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request 2024-06-16 13:50:56 +02:00
soundwire soundwire: cadence: fix invalid PDI offset 2024-06-12 11:39:08 +02:00
spi spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4 2024-06-27 13:52:31 +02:00
spmi spmi: hisi-spmi-controller: Do not override device identifier 2024-06-21 14:40:33 +02:00
ssb ssb: Fix potential NULL pointer dereference in ssb_device_uevent() 2024-06-27 13:52:12 +02:00
staging greybus: arche-ctrl: move device table to its right location 2024-06-12 11:39:09 +02:00
target scsi: target: Fix SELinux error when systemd-modules loads the target module 2024-04-05 21:37:54 -04:00
tc
tee ARM: SoC drivers for 6.9 2024-03-12 10:35:24 -07:00
thermal thermal: core: Change PM notifier priority to the minimum 2024-06-27 13:52:31 +02:00
thunderbolt thunderbolt: debugfs: Fix margin debugfs node creation condition 2024-06-21 14:40:13 +02:00
tty serial: 8250_dw: Revert "Move definitions to the shared header" 2024-06-27 13:52:30 +02:00
ufs scsi: ufs: core: Free memory allocated for model before reinit 2024-06-27 13:52:27 +02:00
uio hyperv-fixes for v6.9-rc4 2024-04-11 16:23:56 -07:00
usb scsi: usb: uas: Do not query the IO Advice Hints Grouping mode page for USB/UAS devices 2024-06-27 13:52:29 +02:00
vdpa vDPA: code clean for vhost_vdpa uapi 2024-04-22 17:07:13 -04:00
vfio vfio/pci: Collect hot-reset devices to local buffer 2024-06-27 13:52:19 +02:00
vhost vhost: correct misleading printing information 2024-04-08 04:11:04 -04:00
video fbdev: savage: Handle err return when savagefb_check_var failed 2024-06-16 13:51:01 +02:00
virt drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() 2024-05-30 09:44:58 +02:00
virtio virtio: delete vq in vp_find_vqs_msix() when request_irq() fails 2024-06-12 11:39:42 +02:00
w1
watchdog watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin 2024-06-16 13:51:08 +02:00
xen drivers/xen: Improve the late XenStore init protocol 2024-06-12 11:39:43 +02:00
zorro
Kconfig
Makefile Revert "leds: Only descend into leds directory when CONFIG_NEW_LEDS is set" 2024-03-07 08:48:10 +00:00