michael/linux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Files
v6.16.11
linux/drivers
History
Chandra Mohan Sundar 1f053d82e5 media: stm32-csi: Fix dereference before NULL check 
commit 80eaf32672 upstream.

In 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while
assigning a value to the 'src_pad'. However the same value is being
checked against NULL at a later point of time indicating that there
are chances that the value can be NULL.

Move the dereference after the NULL check.

Fixes: e7bad98c20 ("media: v4l: Convert the users of v4l2_get_link_freq to call it on a pad")
Cc: stable@vger.kernel.org
Signed-off-by: Chandra Mohan Sundar <chandramohan.explore@gmail.com>
Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-10-06 11:18:48 +02:00
..
accel
accel/ivpu: Prevent recovery work from being queued during device removal
2025-09-09 19:02:28 +02:00
accessibility
…
acpi
ACPI: RISC-V: Fix FFH_CPPC_CSR error handling
2025-09-09 19:02:39 +02:00
amba
…
android
binder: Fix selftest page indexing
2025-08-20 18:40:58 +02:00
ata
ata: libata-scsi: Fix CDL control
2025-08-28 16:34:18 +02:00
atm
atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
2025-09-04 16:55:36 +02:00
auxdisplay
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
base
x86/vmscape: Enable the mitigation
2025-09-11 17:23:22 +02:00
bcma
…
block
zram: fix slot write race condition
2025-09-25 11:16:45 +02:00
bluetooth
Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
2025-09-09 19:02:21 +02:00
bus
bus: mhi: host: Detect events pointing to unexpected TREs
2025-08-28 16:34:13 +02:00
cache
…
cdrom
…
cdx
cdx: Fix off-by-one error in cdx_rpmsg_probe()
2025-08-28 16:34:40 +02:00
char
ipmi: Fix strcpy source and destination the same
2025-08-20 18:41:31 +02:00
clk
clk: sunxi-ng: mp: Fix dual-divider clock rate readback
2025-09-25 11:16:54 +02:00
clocksource
clocksource: hyper-v: Fix warnings for missing export.h header inclusion
2025-07-09 23:46:06 +00:00
comedi
comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
2025-08-28 16:34:40 +02:00
connector
…
counter
…
cpufreq
cpufreq: Initialize cpufreq-based invariance before subsys
2025-10-02 13:48:27 +02:00
cpuidle
cpuidle: governors: menu: Avoid selecting states with too much latency
2025-08-28 16:34:32 +02:00
crypto
crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked()
2025-09-25 11:16:50 +02:00
cxl
cxl/edac: Fix wrong dpa checking for PPR operation
2025-08-15 16:39:06 +02:00
dax
…
dca
…
devfreq
PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
2025-08-20 18:40:58 +02:00
dio
…
dma
dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
2025-09-19 16:37:39 +02:00
dma-buf
udmabuf: fix vmap missed offset page
2025-08-15 16:38:36 +02:00
dpll
dpll: fix clock quality level reporting
2025-09-25 11:16:43 +02:00
edac
EDAC/altera: Delete an inappropriate dma_free_coherent() call
2025-09-19 16:37:29 +02:00
eisa
…
extcon
…
firewire
firewire: core: fix overlooked update of subsystem ABI version
2025-10-02 13:48:22 +02:00
firmware
firmware: qcom: scm: request the waitqueue irq *after* initializing SCM
2025-09-04 16:55:51 +02:00
fpga
fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
2025-08-28 16:34:39 +02:00
fsi
…
fwctl
…
gnss
…
gpio
gpiolib: Extend software-node support to support secondary software-nodes
2025-10-02 13:48:38 +02:00
gpu
drm/amd/display: Only restore backlight after amdgpu_dm_init or dm_resume
2025-10-02 13:48:37 +02:00
greybus
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
hid
HID: asus: add support for missing PX series fn keys
2025-10-02 13:48:34 +02:00
hsi
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
hte
…
hv
Drivers: hv: Use nested hypercall for post message and signal event
2025-07-15 06:24:16 +00:00
hwmon
hwmon: (ina238) Correctly clamp power limits
2025-09-09 19:02:38 +02:00
hwspinlock
…
hwtracing
…
i2c
i2c: designware: Add quirk for Intel Xe
2025-10-02 13:48:25 +02:00
i3c
i3c: master: Initialize ret in i3c_i2c_notifier_call()
2025-08-20 18:41:29 +02:00
idle
intel_idle: Allow loading ACPI tables for any family
2025-08-20 18:40:51 +02:00
iio
iio: imu: inv_icm42600: change invalid data error to -EBUSY
2025-08-28 16:34:42 +02:00
infiniband
IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
2025-10-02 13:48:26 +02:00
input
Input: xpad - add support for Flydigi Apex 5
2025-09-19 16:37:34 +02:00
interconnect
interconnect: qcom: sc8180x: specify num_nodes
2025-08-15 16:38:35 +02:00
iommu
iommufd: Fix race during abort for file descriptors
2025-10-02 13:48:40 +02:00
ipack
…
irqchip
irqchip/mvebu-gicp: Fix an IS_ERR() vs NULL check in probe()
2025-09-19 16:37:26 +02:00
isdn
mISDN: Fix memory leak in dsp_hwec_enable()
2025-09-09 19:02:22 +02:00
leds
leds: leds-lp50xx: Handle reg to get correct multi_index
2025-08-20 18:41:25 +02:00
macintosh
…
mailbox
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
mcb
…
md
dm-stripe: fix a possible integer overflow
2025-09-25 11:16:46 +02:00
media
media: stm32-csi: Fix dereference before NULL check
2025-10-06 11:18:48 +02:00
memory
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
memstick
memstick: Fix deadlock by moving removing flag earlier
2025-08-28 16:34:35 +02:00
message
…
mfd
mfd: mt6397: Do not use generic name for keypad sub-devices
2025-08-28 16:34:24 +02:00
misc
misc: rtsx: usb: Ensure mmc child device is active when card is present
2025-08-20 18:41:37 +02:00
mmc
mmc: sdhci-cadence: add Mobileye eyeQ support
2025-10-02 13:48:25 +02:00
most
most: core: Drop device reference after usage in get_channel()
2025-08-28 16:34:40 +02:00
mtd
mtd: rawnand: nuvoton: Fix an error handling path in ma35_nand_chips_init()
2025-09-19 16:37:35 +02:00
mux
mux: mmio: Fix missing CONFIG_REGMAP_MMIO
2025-07-04 16:27:08 +02:00
net
wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
2025-10-06 11:18:48 +02:00
nfc
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
ntb
…
nubus
…
nvdimm
…
nvme
nvme: fix PI insert on write
2025-09-25 11:16:41 +02:00
nvmem
nvmem: layouts: u-boot-env: remove crc32 endianness conversion
2025-07-16 16:51:04 +02:00
of
of_numa: fix uninitialized memory nodes causing kernel panic
2025-09-09 19:02:31 +02:00
opp
…
parisc
…
parport
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
pci
PCI: mvebu: Fix use of for_each_of_range() iterator
2025-09-19 16:37:35 +02:00
pcmcia
pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
2025-09-25 11:16:42 +02:00
peci
…
perf
perf/arm: Add missing .suppress_bind_attrs
2025-08-20 18:41:12 +02:00
phy
phy: ti-pipe3: fix device leak at unbind
2025-09-19 16:37:39 +02:00
pinctrl
pinctrl: airoha: fix wrong MDIO function bitmaks
2025-10-02 13:48:37 +02:00
platform
platform/x86: lg-laptop: Fix WMAB call in fan_mode_store()
2025-10-02 13:48:34 +02:00
pmdomain
imx8m-blk-ctrl: set ISI panic write hurry level
2025-08-20 18:41:03 +02:00
pnp
…
power
power: supply: bq27xxx: restrict no-battery detection to bq27000
2025-09-25 11:16:46 +02:00
powercap
powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
2025-08-15 16:38:31 +02:00
pps
pps: clients: gpio: fix interrupt handling order in remove path
2025-08-20 18:41:01 +02:00
ps3
…
ptp
ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog
2025-09-09 19:02:22 +02:00
pwm
pwm: mediatek: Fix duty and period setting
2025-08-28 16:34:23 +02:00
rapidio
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
2025-06-11 22:42:36 -07:00
ras
…
regulator
regulator: sy7636a: fix lifecycle of power good gpio
2025-09-19 16:37:38 +02:00
remoteproc
remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
2025-08-20 18:40:57 +02:00
reset
reset: brcmstb: Enable reset drivers for ARCH_BCM2835
2025-08-20 18:41:01 +02:00
rpmsg
…
rtc
rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
2025-08-20 18:41:33 +02:00
s390
s390/sclp: Fix SCCB present check
2025-08-28 16:34:36 +02:00
sbus
…
scsi
scsi: sr: Reinstate rotational media flag
2025-09-09 19:02:37 +02:00
sh
…
siox
…
slimbus
…
soc
soc: qcom: mdt_loader: Deal with zero e_shentsize
2025-09-09 19:02:31 +02:00
soundwire
soundwire: Move handle_nested_irq outside of sdw_dev_lock
2025-08-20 18:41:28 +02:00
spi
spi: cadence-qspi: defer runtime support on socfpga if reset bit is enabled
2025-10-02 13:48:39 +02:00
spmi
…
ssb
…
staging
media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
2025-08-28 16:34:27 +02:00
target
scsi: target: target_core_configfs: Add length check to avoid buffer overflow
2025-10-06 11:18:47 +02:00
tc
…
tee
tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
2025-09-09 19:02:17 +02:00
thermal
thermal/drivers/mediatek/lvts_thermal: Add mt7988 lvts commands
2025-09-04 16:55:52 +02:00
thunderbolt
thunderbolt: Fix copy+paste error in match_service_id()
2025-08-20 18:41:37 +02:00
tty
serial: sc16is7xx: fix bug in flow control levels init
2025-09-19 16:37:34 +02:00
ufs
scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE
2025-10-02 13:48:22 +02:00
uio
Merge tag 'char-misc-6.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2025-06-06 11:50:47 -07:00
usb
usb: core: Add 0x prefix to quirks debug output
2025-10-02 13:48:24 +02:00
vdpa
vdpa: Fix IDR memory leak in VDUSE module exit
2025-08-15 16:39:15 +02:00
vfio
vfio/mlx5: fix possible overflow in tracking max message size
2025-08-20 18:41:30 +02:00
vhost
vhost-net: flush batched before enabling notifications
2025-10-02 13:48:37 +02:00
video
fbcon: Fix OOB access in font allocation
2025-10-02 13:48:39 +02:00
virt
fix locking in efi_secret_unlink()
2025-08-20 18:40:56 +02:00
virtio
virtio_ring: Fix error reporting in virtqueue_resize
2025-07-03 11:40:02 +02:00
w1
Merge tag 'char-misc-6.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2025-06-06 11:50:47 -07:00
watchdog
watchdog: iTCO_wdt: Report error if timeout configuration fails
2025-08-20 18:41:23 +02:00
xen
xen/gntdev: remove struct gntdev_copy_batch from stack
2025-08-15 16:38:47 +02:00
zorro
…
Kconfig
…
Makefile
…