Benjamin Tissoires d18f63e848 HID: core: do not bypass hid_hw_raw_request ...

commit c2ca42f190 upstream.

hid_hw_raw_request() is actually useful to ensure the provided buffer
and length are valid. Directly calling in the low level transport driver
function bypassed those checks and allowed invalid paramto be used.

Reported-by: Alan Stern <stern@rowland.harvard.edu>
Closes: https://lore.kernel.org/linux-input/c75433e0-9b47-4072-bbe8-b1d14ea97b13@rowland.harvard.edu/
Cc: stable@vger.kernel.org
Link: https://patch.msgid.link/20250710-report-size-null-v2-3-ccf922b7c4e5@kernel.org
Signed-off-by: Benjamin Tissoires <bentiss@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-07-24 08:56:22 +02:00

..

amd-sfh-hid

HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()

2024-10-09 17:18:57 +02:00

bpf

HID: bpf: abort dispatch if device destroyed

2025-05-22 14:29:44 +02:00

i2c-hid

HID: i2c-hid: improve i2c_hid_get_report error message

2025-04-10 14:39:29 +02:00

intel-ish-hid

HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs

2025-03-22 12:54:16 -07:00

surface-hid

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

usbhid

HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()

2025-06-19 15:32:34 +02:00

.kunitconfig

…

hid-a4tech.c

…

hid-accutouch.c

…

hid-alps.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-apple.c

HID: apple: disable Fn key handling on the Omoton KB066

2025-03-22 12:54:28 -07:00

hid-appleir.c

HID: appleir: Fix potential NULL dereference at raw event handle

2025-03-13 13:01:50 +01:00

hid-asus.c

hid-asus: check ROG Ally MCU version and warn

2025-06-27 11:11:32 +01:00

hid-aureal.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-axff.c

…

hid-belkin.c

…

hid-betopff.c

…

hid-bigbenff.c

HID: bigbenff: constify fixed up report descriptor

2024-09-05 16:20:56 +02:00

hid-cherry.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-chicony.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-cmedia.c

HID: cmedia: constify fixed up report descriptor

2024-08-27 16:30:43 +02:00

hid-core.c

HID: core: do not bypass hid_hw_raw_request

2025-07-24 08:56:22 +02:00

hid-corsair.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-cougar.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-cp2112.c

hid: cp2112: Use irq_get_trigger_type() helper

2024-09-13 15:39:37 +02:00

hid-creative-sb0540.c

…

hid-cypress.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-debug.c

…

hid-dr.c

HID: dr: constify fixed up report descriptor

2024-09-05 16:20:56 +02:00

hid-elan.c

…

hid-elecom.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-elo.c

…

hid-emsff.c

…

hid-evision.c

…

hid-ezkey.c

…

hid-ft260.c

…

hid-gaff.c

…

hid-gembird.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-generic.c

HID: add per device quirk to force bind to hid-generic

2024-12-14 20:03:39 +01:00

hid-gfrm.c

…

hid-glorious.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-goodix-spi.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-google-hammer.c

HID: google: fix unused variable warning under !CONFIG_ACPI

2025-03-13 13:02:00 +01:00

hid-google-stadiaff.c

…

hid-gt683r.c

…

hid-gyration.c

…

hid-holtek-kbd.c

HID: holtek-kbd: constify fixed up report descriptor

2024-09-05 16:20:56 +02:00

hid-holtek-mouse.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-holtekff.c

…

hid-hyperv.c

HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()

2025-06-19 15:32:34 +02:00

hid-icade.c

…

hid-ids.h

HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

2025-07-17 18:37:23 +02:00

hid-input-test.c

…

hid-input.c

HID: fix generic desktop D-Pad controls

2025-02-08 09:57:11 +01:00

hid-ite.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-jabra.c

…

hid-kensington.c

HID: Fix spelling mistakes "Kensigton" -> "Kensington"

2024-07-12 18:28:03 +02:00

hid-keytouch.c

HID: keytouch: constify fixed up report descriptor

2024-09-05 16:20:56 +02:00

hid-kye.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-lcpower.c

HID: add more missing MODULE_DESCRIPTION() macros

2024-07-10 09:11:27 +02:00

hid-led.c

…

hid-lenovo.c

HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2

2025-07-17 18:37:22 +02:00

hid-letsketch.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-lg2ff.c

…

hid-lg3ff.c

…

hid-lg4ff.c

…

hid-lg4ff.h

…

hid-lg-g15.c

…

hid-lg.c

HID: lg: constify fixed up report descriptor

2024-09-06 10:06:02 +02:00

hid-lg.h

…

hid-lgff.c

…

hid-logitech-dj.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-logitech-hidpp.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-macally.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-magicmouse.c

HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support

2024-12-14 20:03:41 +01:00

hid-maltron.c

HID: maltron: constify fixed up report descriptor

2024-09-05 16:20:56 +02:00

hid-mcp2200.c

…

hid-mcp2221.c

HID: mcp2221: Remove unnecessary semicolon

2024-07-12 18:30:11 +02:00

hid-megaworld.c

…

hid-mf.c

…

hid-microsoft.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-monterey.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-multitouch.c

HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2

2025-07-17 18:37:22 +02:00

hid-nintendo.c

HID: nintendo: avoid bluetooth suspend/resume stalls

2025-07-17 18:37:23 +02:00

hid-nti.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-ntrig.c

…

hid-nvidia-shield.c

…

hid-ortek.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-penmount.c

…

hid-petalynx.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-picolcd_backlight.c

HID: picoLCD: Use backlight power constants

2024-09-05 10:55:15 +02:00

hid-picolcd_cir.c

…

hid-picolcd_core.c

…

hid-picolcd_debugfs.c

…

hid-picolcd_fb.c

…

hid-picolcd_lcd.c

…

hid-picolcd_leds.c

…

hid-picolcd.h

…

hid-pl.c

…

hid-plantronics.c

HID: hid-plantronics: Add mic mute mapping and generalize quirks

2025-04-07 10:08:35 +02:00

hid-playstation.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-primax.c

…

hid-prodikeys.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-pxrc.c

HID: pxrc: constify fixed up report descriptor

2024-09-05 16:20:57 +02:00

hid-quirks.c

HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

2025-07-17 18:37:23 +02:00

hid-razer.c

…

hid-redragon.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-retrode.c

…

hid-rmi.c

…

hid-roccat-arvo.c

…

hid-roccat-arvo.h

…

hid-roccat-common.c

…

hid-roccat-common.h

…

hid-roccat-isku.c

…

hid-roccat-isku.h

…

hid-roccat-kone.c

…

hid-roccat-kone.h

…

hid-roccat-koneplus.c

…

hid-roccat-koneplus.h

…

hid-roccat-konepure.c

…

hid-roccat-kovaplus.c

…

hid-roccat-kovaplus.h

…

hid-roccat-lua.c

…

hid-roccat-lua.h

…

hid-roccat-pyra.c

…

hid-roccat-pyra.h

…

hid-roccat-ryos.c

…

hid-roccat-savu.c

…

hid-roccat-savu.h

…

hid-roccat.c

…

hid-saitek.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-samsung.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-semitek.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-sensor-custom.c

HID: hid-sensor-custom: Convert comma to semicolon

2024-09-03 14:00:05 +02:00

hid-sensor-hub.c

HID: hid-sensor-hub: don't use stale platform-data on remove

2025-02-17 10:05:13 +01:00

hid-sigmamicro.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-sjoy.c

…

hid-sony.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-speedlink.c

…

hid-steam.c

HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode

2025-03-22 12:54:16 -07:00

hid-steelseries.c

HID: steelseries: constify fixed up report descriptor

2024-09-05 16:20:57 +02:00

hid-sunplus.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hid-thrustmaster.c

HID: thrustmaster: fix memory leak in thrustmaster_interrupts()

2025-05-22 14:29:38 +02:00

hid-tivo.c

…

hid-tmff.c

…

hid-topre.c

HID: topre: Fix n-key rollover on Realforce R3S TKL boards

2025-03-22 12:54:16 -07:00

hid-topseed.c

…

hid-twinhan.c

…

hid-u2fzero.c

…

hid-uclogic-core-test.c

…

hid-uclogic-core.c

HID: uclogic: Add NULL check in uclogic_input_configured()

2025-05-22 14:29:38 +02:00

hid-uclogic-params-test.c

…

hid-uclogic-params.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-uclogic-params.h

HID: uclogic: constify fixed up report descriptor

2024-09-05 16:20:57 +02:00

hid-uclogic-rdesc-test.c

…

hid-uclogic-rdesc.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hid-uclogic-rdesc.h

HID: uclogic: constify fixed up report descriptor

2024-09-05 16:20:57 +02:00

hid-udraw-ps3.c

…

hid-universal-pidff.c

HID: hid-universal-pidff: Add Asetek wheelbases support

2025-04-20 10:15:30 +02:00

hid-viewsonic.c

HID: viewsonic: constify fixed up report descriptor

2024-09-05 16:20:57 +02:00

hid-vivaldi-common.c

…

hid-vivaldi-common.h

…

hid-vivaldi.c

…

hid-vrc2.c

HID: vrc2: constify fixed up report descriptor

2024-09-05 16:20:57 +02:00

hid-waltop.c

HID: waltop: constify fixed up report descriptor

2024-09-05 16:20:57 +02:00

hid-wiimote-core.c

…

hid-wiimote-debug.c

…

hid-wiimote-modules.c

…

hid-wiimote.h

…

hid-winwing.c

HID: winwing: Add NULL check in winwing_init_led()

2025-02-21 14:01:15 +01:00

hid-xiaomi.c

HID: xiaomi: constify fixed up report descriptor

2024-09-05 16:20:57 +02:00

hid-xinmo.c

…

hid-zpff.c

…

hid-zydacron.c

HID: change return type of report_fixup() to const

2024-08-27 16:29:55 +02:00

hidraw.c

HID: hidraw: add HIDIOCREVOKE ioctl

2024-08-29 10:39:37 +02:00

Kconfig

HID: Add hid-universal-pidff driver and supported device ids

2025-04-20 10:15:14 +02:00

Makefile

HID: Add hid-universal-pidff driver and supported device ids

2025-04-20 10:15:14 +02:00

uhid.c

[tree-wide] finally take no_llseek out

2024-09-27 08:18:43 -07:00

wacom_sys.c

HID: wacom: fix kobject reference count leak

2025-07-06 11:01:44 +02:00

wacom_wac.c

HID: Wacom: Add PCI Wacom device support

2025-02-17 10:04:51 +01:00

wacom_wac.h

HID: wacom: Do not warn about dropped packets for first packet

2024-09-10 23:47:03 +02:00

wacom.h

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00