michael/linux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Files
linux-6.11.y
linux/drivers
History
Dan Carpenter 6ba6e19912 sh: intc: Fix use-after-free bug in register_intc_controller() 
[ Upstream commit 63e72e5519 ]

In the error handling for this function, d is freed without ever
removing it from intc_list which would lead to a use after free.
To fix this, let's only add it to the list after everything has
succeeded.

Fixes: 2dcec7a988 ("sh: intc: set_irq_wake() support")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
Signed-off-by: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-12-05 13:54:33 +01:00
..
accel
accel/ivpu: Prevent recovery invocation during probe and resume
2024-12-05 13:53:14 +01:00
accessibility
treewide: remove unnecessary <linux/version.h> inclusion
2024-08-12 18:36:44 +09:00
acpi
ACPI: CPPC: Fix _CPC register setting issue
2024-12-05 13:52:53 +01:00
amba
…
android
binder: fix UAF caused by offsets overwrite
2024-09-03 12:18:46 +02:00
ata
ata: libata: Set DID_TIME_OUT for commands that actually timed out
2024-11-01 02:02:43 +01:00
atm
atm: idt77252: prevent use after free in dequeue_rx()
2024-08-12 10:41:44 +01:00
auxdisplay
Merge tag 'auxdisplay-for-v6.11-tag1' of git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k
2024-07-26 11:04:28 -07:00
base
firmware_loader: Fix possible resource leak in fw_log_firmware_info()
2024-12-05 13:54:04 +01:00
bcma
…
block
brd: decrease the number of allocated pages which discarded
2024-12-05 13:54:33 +01:00
bluetooth
Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name()
2024-12-05 13:53:27 +01:00
bus
bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian
2024-12-05 13:54:03 +01:00
cache
cache: StarFive: Require a 64-bit system
2024-08-01 07:15:02 -07:00
cdrom
cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
2024-11-01 02:02:32 +01:00
cdx
…
char
tpm: Disable TPM on tpm2_create_primary() failure
2024-11-22 15:39:52 +01:00
clk
clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access
2024-12-05 13:54:11 +01:00
clocksource
clocksource/drivers/timer-ti-dm: Fix child node refcount handling
2024-12-05 13:52:55 +01:00
comedi
comedi: Flush partial mappings in error case
2024-12-05 13:54:11 +01:00
connector
…
counter
counter: stm32-timer-cnt: fix device_node handling in probe_encoder()
2024-12-05 13:54:25 +01:00
cpufreq
cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
2024-12-05 13:54:17 +01:00
cpuidle
cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
2024-10-04 16:38:50 +02:00
crypto
crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
2024-12-05 13:52:53 +01:00
cxl
cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
2024-11-08 16:30:57 +01:00
dax
dax: delete a stale directory pmem
2024-12-05 13:53:41 +01:00
dca
…
devfreq
…
dio
…
dma
dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
2024-08-28 18:40:17 +05:30
dma-buf
udmabuf: fix vmap_udmabuf error page set
2024-12-05 13:53:08 +01:00
dpll
dpll: add Embedded SYNC feature for a pin
2024-11-08 16:30:47 +01:00
edac
EDAC/igen6: Avoid segmentation fault on module unload
2024-12-05 13:52:52 +01:00
eisa
…
extcon
…
firewire
firewire: core: fix invalid port index for parent device
2024-11-01 02:02:41 +01:00
firmware
firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
2024-12-05 13:53:05 +01:00
fpga
…
fsi
fsi: add missing MODULE_DESCRIPTION() macros
2024-07-31 13:40:00 +02:00
gnss
…
gpio
gpio: exar: set value when external pull-up or pull-down is present
2024-12-05 13:54:16 +01:00
gpu
drm/xe/ufence: Wake up waiters after setting ufence->signalled
2024-12-05 13:54:05 +01:00
greybus
…
hid
HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
2024-12-05 13:54:21 +01:00
hsi
…
hte
…
hv
Merge tag 'hyperv-fixes-signed-20240908' of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux
2024-09-09 09:31:55 -07:00
hwmon
hwmon: (aquacomputer_d5next) Fix length of speed_input array
2024-12-05 13:53:54 +01:00
hwspinlock
…
hwtracing
coresight: tmc: sg: Do not leak sg_table
2024-10-04 16:38:22 +02:00
i2c
i2c: dev: Fix memory leak when underlying adapter does not support I2C
2024-12-05 13:53:26 +01:00
i3c
i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
2024-12-05 13:53:48 +01:00
idle
intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake
2024-10-10 12:03:06 +02:00
iio
iio: gts: Fix uninitialized symbol 'ret'
2024-12-05 13:54:20 +01:00
infiniband
RDMA/mlx5: Move events notifier registration to be after device registration
2024-12-05 13:53:42 +01:00
input
Input: cs40l50 - fix wrong usage of INIT_WORK()
2024-12-05 13:54:26 +01:00
interconnect
interconnect: qcom: icc-rpmh: probe defer incase of missing QoS clock dependency
2024-12-05 13:54:03 +01:00
iommu
iommu/vt-d: Fix checks and print in pgtable_walk()
2024-12-05 13:53:37 +01:00
ipack
…
irqchip
irqchip/irq-mvebu-sei: Move misplaced select() callback to SEI CP domain
2024-12-05 13:54:18 +01:00
isdn
…
leds
leds: ktd2692: Set missing timing properties
2024-12-05 13:53:38 +01:00
macintosh
…
mailbox
kfifo: don't include dma-mapping.h in kfifo.h
2024-12-05 13:54:27 +01:00
mcb
…
md
dm-bufio: fix warnings about duplicate slab caches
2024-12-05 13:54:07 +01:00
media
media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
2024-12-05 13:54:22 +01:00
memory
memory: tegra186-emc: drop unused to_tegra186_emc()
2024-10-10 12:03:47 +02:00
memstick
…
message
scsi: fusion: Remove unused variable 'rc'
2024-12-05 13:53:38 +01:00
mfd
mfd: rt5033: Fix missing regmap_del_irq_chip()
2024-12-05 13:53:38 +01:00
misc
Compiler Attributes: disable __counted_by for clang < 19.1.3
2024-12-05 13:54:10 +01:00
mmc
mmc: mmc_spi: drop buggy snprintf()
2024-12-05 13:52:58 +01:00
most
…
mtd
ubi: fastmap: Fix duplicate slab cache names while attaching
2024-12-05 13:54:28 +01:00
mux
…
net
i40e: Fix handling changed priv flags
2024-12-05 13:54:21 +01:00
nfc
nfc: pn533: Add poll mod list filling check
2024-08-29 12:08:44 +02:00
ntb
ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
2024-10-17 15:26:36 +02:00
nubus
…
nvdimm
virtio_pmem: Check device status before requesting flush
2024-10-17 15:26:40 +02:00
nvme
nvme-fabrics: fix kernel crash while shutting down controller
2024-12-05 13:54:30 +01:00
nvmem
nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
2024-09-03 12:20:41 +02:00
of
of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
2024-12-05 13:53:03 +01:00
opp
OPP: fix error code in dev_pm_opp_set_config()
2024-10-17 15:26:59 +02:00
parisc
…
parport
parport: Proper fix for array out-of-bounds access
2024-10-22 15:51:34 +02:00
pci
PCI: Fix use-after-free of slot->bus on hot remove
2024-12-05 13:54:10 +01:00
pcmcia
…
peci
…
perf
perf/arm-cmn: Ensure port and device id bits are set properly
2024-12-05 13:54:30 +01:00
phy
phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe
2024-12-05 13:54:03 +01:00
pinctrl
pinctrl: qcom: spmi: fix debugfs drive strength
2024-12-05 13:54:12 +01:00
platform
platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
2024-12-05 13:54:18 +01:00
pmdomain
pmdomain: ti-sci: Add missing of_node_put() for args.np
2024-12-05 13:53:03 +01:00
pnp
…
power
power: supply: rt9471: Use IC status regfield to report real charger status
2024-12-05 13:53:57 +01:00
powercap
powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
2024-11-08 16:30:52 +01:00
pps
pps: add an error check in parport_attach
2024-10-04 16:38:42 +02:00
ps3
…
ptp
ptp: ocp: adjust sysfs entries to expose tty information
2024-09-03 15:37:48 +02:00
pwm
pwm: Assume a disabled PWM to emit a constant inactive output
2024-12-05 13:53:05 +01:00
rapidio
…
ras
…
regulator
regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
2024-12-05 13:53:00 +01:00
remoteproc
remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
2024-12-05 13:53:53 +01:00
reset
reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
2024-11-01 02:02:23 +01:00
rpmsg
rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
2024-12-05 13:53:53 +01:00
rtc
rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
2024-12-05 13:54:31 +01:00
s390
s390/cio: Do not unregister the subchannel based on DNV
2024-12-05 13:52:44 +01:00
sbus
…
scsi
scsi: sg: Enable runtime power management
2024-12-05 13:53:39 +01:00
sh
sh: intc: Fix use-after-free bug in register_intc_controller()
2024-12-05 13:54:33 +01:00
siox
…
slimbus
…
soc
soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
2024-12-05 13:54:22 +01:00
soundwire
soundwire: intel_ace2x: Send PDI stream number during prepare
2024-11-01 02:02:44 +01:00
spi
spi: Fix acpi deferred irq probe
2024-12-05 13:54:17 +01:00
spmi
spmi: pmic-arb: add missing newline in dev_err format strings
2024-07-31 13:49:28 +02:00
ssb
…
staging
staging: vchiq_arm: Fix missing refcount decrement in error path for fw_node
2024-12-05 13:54:25 +01:00
target
scsi: target: Fix incorrect function name in pscsi_create_type_disk()
2024-12-05 13:53:38 +01:00
tc
…
tee
…
thermal
thermal: core: Fix race between zone registration and system suspend
2024-12-05 13:52:50 +01:00
thunderbolt
thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
2024-11-14 13:21:14 +01:00
tty
serial: amba-pl011: fix build regression
2024-12-05 13:54:19 +01:00
ufs
scsi: ufs: core: Start the RTC update work later
2024-11-14 13:21:08 +01:00
uio
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
2024-09-03 12:37:38 +02:00
usb
usb: dwc3: gadget: Fix looping of queued SG entries
2024-12-05 13:54:25 +01:00
vdpa
vdpa/mlx5: Fix suboptimal range on iotlb iteration
2024-12-05 13:53:55 +01:00
vfio
vfio/pci: Properly hide first-in-list PCIe extended capability
2024-12-05 13:53:56 +01:00
vhost
vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
2024-10-10 12:04:17 +02:00
video
fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
2024-12-05 13:53:42 +01:00
virt
virt: sev-guest: Ensure the SNP guest messages do not exceed a page
2024-10-10 12:03:14 +02:00
virtio
virtio_pci: Fix admin vq cleanup by using correct info pointer
2024-11-17 15:09:53 +01:00
w1
…
watchdog
watchdog: Add HAS_IOPORT dependency for SBC8360 and SBC7240
2024-12-05 13:53:02 +01:00
xen
xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
2024-12-05 13:54:06 +01:00
zorro
…
Kconfig
…
Makefile
…