Shigeru Yoshida ebd6f886aa fbdev: fbcon: Properly revert changes when vc_resize() failed ... commit a5a923038d upstream. fbcon_do_set_font() calls vc_resize() when font size is changed. However, if if vc_resize() failed, current implementation doesn't revert changes for font size, and this causes inconsistent state. syzbot reported unable to handle page fault due to this issue [1]. syzbot's repro uses fault injection which cause failure for memory allocation, so vc_resize() failed. This patch fixes this issue by properly revert changes for font related date when vc_resize() failed. Link: https://syzkaller.appspot.com/bug?id=3443d3a1fa6d964dd7310a0cb1696d165a3e07c4 [1] Reported-by: syzbot+a168dbeaaa7778273c1b@syzkaller.appspotmail.com Signed-off-by: Shigeru Yoshida <syoshida@redhat.com> Signed-off-by: Helge Deller <deller@gmx.de> CC: stable@vger.kernel.org # 5.15+ Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-08-31 17:16:48 +02:00
..
accessibility	tty: the rest, stop using tty_schedule_flip()	2022-07-29 17:25:32 +02:00
acpi	PCI/ACPI: Guard ARM64-specific mcfg_quirks	2022-08-25 11:40:36 +02:00
amba
android	android: binder: stop saving a pointer to the VMA	2022-08-17 14:23:58 +02:00
ata	ata: libata-eh: Add missing command name	2022-08-25 11:39:55 +02:00
atm	atm: idt77252: fix use-after-free bugs caused by tst_timer	2022-08-25 11:40:15 +02:00
auxdisplay
base	drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist	2022-08-31 17:16:35 +02:00
bcma
block	loop: Check for overflow while configuring loop	2022-08-31 17:16:47 +02:00
bluetooth	Bluetooth: hci_intel: Add check for platform_driver_register	2022-08-17 14:23:34 +02:00
bus	bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()	2022-08-17 14:23:10 +02:00
cdrom
char
clk	clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description	2022-08-25 11:40:34 +02:00
clocksource	clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup()	2022-07-07 17:53:32 +02:00
comedi
connector
counter
cpufreq	cpufreq: pmac32-cpufreq: Fix refcount leak bug	2022-07-21 21:24:34 +02:00
cpuidle
crypto	crypto: hisilicon/sec - fix auth key size error	2022-08-17 14:23:35 +02:00
cxl	cxl/port: Hold port reference until decoder release	2022-07-12 16:34:58 +02:00
dax
dca
devfreq	PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events	2022-07-07 17:53:27 +02:00
dio
dma	dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed	2022-08-25 11:40:38 +02:00
dma-buf	dma-buf/poll: Get a file reference for outstanding fence callbacks	2022-07-12 16:34:51 +02:00
edac	EDAC/ghes: Set the DIMM label unconditionally	2022-08-03 12:03:55 +02:00
eisa
extcon
firewire
firmware	firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails	2022-08-17 14:24:20 +02:00
fpga	fpga: altera-pr-ip: fix unsigned comparison with less than zero	2022-08-17 14:23:41 +02:00
fsi	fsi: occ: Force sequence numbering per OCC	2022-07-07 17:53:32 +02:00
gnss
gpio	gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()	2022-08-17 14:23:56 +02:00
gpu	drm/meson: Fix overflow implicit truncation warnings	2022-08-25 11:40:32 +02:00
greybus
hid	HID: multitouch: new device class fix Lenovo X12 trackpad sticky	2022-08-25 11:40:30 +02:00
hsi
hv
hwmon	hwmon: (drivetemp) Add module alias	2022-08-17 14:23:13 +02:00
hwspinlock
hwtracing	coresight: etm4x: avoid build failure with unrolled loops	2022-08-25 11:40:35 +02:00
i2c	i2c: imx: Make sure to unregister adapter on remove()	2022-08-25 11:40:26 +02:00
i3c
idle	intel_idle: Disable IBRS during long idle	2022-07-23 12:54:04 +02:00
iio	iio: cros: Register FIFO callback after sensor is registered	2022-08-17 14:23:55 +02:00
infiniband	RDMA/rxe: Limit the number of calls to each tasklet	2022-08-25 11:40:37 +02:00
input	Input: i8042 - add additional TUXEDO devices to i8042 quirk tables	2022-08-31 17:16:35 +02:00
interconnect	interconnect: imx: fix max_node_id	2022-08-17 14:23:53 +02:00
iommu	iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit	2022-08-25 11:40:41 +02:00
ipack
irqchip	irqchip/tegra: Fix overflow implicit truncation warnings	2022-08-25 11:40:32 +02:00
isdn
leds
macintosh	macintosh/adb: fix oob read in do_adb_query() function	2022-08-11 13:07:54 +02:00
mailbox
mcb
md	drivers:md:fix a potential use-after-free bug	2022-08-25 11:40:39 +02:00
media	venus: pm_helpers: Fix warning in OPP during probe	2022-08-25 11:40:45 +02:00
memory	memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash	2022-07-12 16:34:52 +02:00
memstick	memstick/ms_block: Fix a memory leak	2022-08-17 14:23:50 +02:00
message
mfd	mfd: max77620: Fix refcount leak in max77620_initialise_fps	2022-08-17 14:24:09 +02:00
misc	cxl: Fix a memory leak in an error handling path	2022-08-25 11:40:36 +02:00
mmc	mmc: tmio: avoid glitches when resetting	2022-08-25 11:40:36 +02:00
most
mtd	mtd: spi-nor: fix spi_nor_spimem_setup_op() call in spi_nor_erase_{sector,chip}()	2022-08-17 14:23:58 +02:00
mux
net	net: stmmac: work around sporadic tx issue on link-up	2022-08-31 17:16:46 +02:00
nfc	nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout	2022-08-31 17:16:38 +02:00
ntb	NTB: ntb_tool: uninitialized heap data in tool_fn_write()	2022-08-25 11:40:14 +02:00
nubus
nvdimm
nvme	block: add a bdev_max_zone_append_sectors helper	2022-08-31 17:16:34 +02:00
nvmem
of	of/fdt: declared return type does not match actual return type	2022-08-17 14:23:59 +02:00
opp	opp: Fix error check in dev_pm_opp_attach_genpd()	2022-08-17 14:24:01 +02:00
parisc	parisc: Check the return value of ioremap() in lba_driver_probe()	2022-08-17 14:22:51 +02:00
parport
pci	PCI: aardvark: Fix reporting Slot capabilities on emulated bridge	2022-08-25 11:40:31 +02:00
pcmcia
perf	drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX	2022-08-17 14:23:14 +02:00
phy	phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks	2022-08-25 11:40:39 +02:00
pinctrl	pinctrl: intel: Check against matching data instead of ACPI companion	2022-08-25 11:40:36 +02:00
platform	platform/chrome: cros_ec_proto: don't show MKBP version if unsupported	2022-08-25 11:40:30 +02:00
pnp
power	power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe	2022-07-29 17:25:10 +02:00
powercap
pps
ps3
ptp
pwm	pwm: lpc18xx: Fix period handling	2022-08-17 14:23:16 +02:00
rapidio
ras
regulator	regulator: of: Fix refcount leak bug in of_get_regulation_constraints()	2022-08-17 14:23:14 +02:00
remoteproc	remoteproc: sysmon: Wait for SSCTL service to come up	2022-08-17 14:24:09 +02:00
reset
rpmsg	rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge	2022-08-17 14:24:08 +02:00
rtc	rtc: rx8025: fix 12/24 hour mode detection on RX-8035	2022-08-17 14:22:53 +02:00
s390	scsi: zfcp: Fix missing auto port scan and thus missing target ports	2022-08-17 14:24:16 +02:00
sbus
scsi	scsi: qla2xxx: edif: Fix dropped IKE message	2022-08-31 17:16:35 +02:00
sh
siox
slimbus
soc	soc: qcom: Make QCOM_RPMPD depend on PM	2022-08-17 14:23:14 +02:00
soundwire	soundwire: revisit driver bind/unbind and callbacks	2022-08-17 14:23:48 +02:00
spi	spi: meson-spicc: add local pow2 clock ops to preserve rate between messages	2022-08-25 11:40:23 +02:00
spmi
ssb
staging	staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback	2022-08-17 14:23:50 +02:00
target
tc
tee	tee: add overflow check in register_shm_helper()	2022-08-21 15:17:47 +02:00
thermal	thermal: sysfs: Fix cooling_device_stats_setup() error code path	2022-08-17 14:22:50 +02:00
thunderbolt
tty	tty: serial: Fix refcount leak bug in ucc_uart.c	2022-08-25 11:40:40 +02:00
uio
usb	gadgetfs: ep_io - wait until IRQ finishes	2022-08-25 11:40:35 +02:00
vdpa	vduse: Tie vduse mgmtdev and its device	2022-07-21 21:24:33 +02:00
vfio	vfio: Clear the caps->buf to NULL after free	2022-08-25 11:40:41 +02:00
vhost
video	fbdev: fbcon: Properly revert changes when vc_resize() failed	2022-08-31 17:16:48 +02:00
virt	vboxguest: Do not use devm for irq	2022-08-25 11:40:33 +02:00
virtio	virtio_mmio: Restore guest page size on resume	2022-07-21 21:24:33 +02:00
visorbus
vlynq
vme
w1
watchdog	watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe()	2022-08-17 14:24:11 +02:00
xen	xen/xenbus: fix return type in xenbus_file_read()	2022-08-25 11:40:14 +02:00
zorro
Kconfig
Makefile