averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-19 21:40:29 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
39bd4097292fd8564cf2cfba9356f8ab11e38d12
linux-stable-mirror/drivers
T
History
Alan SternandGreg Kroah-Hartman 39bd409729 USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts 
commit 7784caa413 upstream.

The usbtmc driver accepts timeout values specified by the user in an
ioctl command, and uses these timeouts for some usb_bulk_msg() calls.
Since the user can specify arbitrarily long timeouts and
usb_bulk_msg() uses unkillable waits, call usb_bulk_msg_killable()
instead to avoid the possibility of the user hanging a kernel thread
indefinitely.

Reported-by: syzbot+25ba18e2c5040447585d@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/linux-usb/8e1c7ac5-e076-44b0-84b8-1b34b20f0ae1@suse.com/T/#t
Tested-by: syzbot+25ba18e2c5040447585d@syzkaller.appspotmail.com
Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
Fixes: 048c6d88a0 ("usb: usbtmc: Add ioctls to set/get usb timeout")
CC: stable@vger.kernel.org
Link: https://patch.msgid.link/81c6fc24-0607-40f1-8c20-5270dab2fad5@rowland.harvard.edu
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2026-03-25 11:05:49 +01:00
..
accel
…
accessibility
…
acpi
ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()
2026-03-25 11:05:47 +01:00
amba
…
android
binder: don't use %pK through printk
2026-03-04 07:20:54 -05:00
ata
ata: libata: avoid long timeouts on hot-unplugged SATA DAS
2026-03-04 07:20:50 -05:00
atm
atm: fore200e: fix use-after-free in tasklets during device removal
2026-03-04 07:21:18 -05:00
auxdisplay
auxdisplay: arm-charlcd: fix release_mem_region() size
2026-03-04 07:19:21 -05:00
base
PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
2026-03-04 07:19:29 -05:00
bcma
…
block
drbd: fix null-pointer dereference on local read error
2026-03-25 11:05:37 +01:00
bluetooth
Bluetooth: hci_qca: Cleanup on all setup failures
2026-03-04 07:21:00 -05:00
bus
bus: omap-ocp2scp: fix OF populate on driver rebind
2026-03-25 11:05:32 +01:00
cache
…
cdrom
…
cdx
…
char
Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
2026-03-04 07:21:00 -05:00
clk
clk: tegra: tegra124-emc: fix device leak on set_rate()
2026-03-25 11:05:35 +01:00
clocksource
clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF
2026-03-04 07:20:36 -05:00
comedi
comedi: Fix getting range information for subdevices 16 to 255
2026-01-30 10:27:35 +01:00
connector
…
counter
…
cpufreq
cpufreq: dt-platdev: Block the driver from probing on more QC platforms
2026-03-04 07:20:34 -05:00
cpuidle
sched: idle: Make skipping governor callbacks more consistent
2026-03-25 11:05:47 +01:00
crypto
crypto: hisilicon/qm - move the barrier before writing to the mailbox register
2026-03-04 07:20:36 -05:00
cxl
cxl: Fix premature commit_end increment on decoder commit failure
2026-03-04 07:20:02 -05:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings
2026-03-04 07:20:53 -05:00
dma-buf
…
edac
EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size()
2026-03-04 07:19:35 -05:00
eisa
…
extcon
…
firewire
…
firmware
x86/efi: defer freeing of boot services memory
2026-03-25 11:05:36 +01:00
fpga
fpga: dfl: use subsys_initcall to allow built-in drivers to be added
2026-03-04 07:21:03 -05:00
fsi
…
gnss
…
gpio
gpio: aspeed-sgpio: Change the macro to support deferred probe
2026-03-04 07:20:42 -05:00
gpu
drm/msm/dsi: fix pclk rate calculation for bonded dsi
2026-03-25 11:05:45 +01:00
greybus
…
hid
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
2026-03-25 11:05:36 +01:00
hsi
…
hte
…
hv
…
hwmon
hwmon: (it87) Check the it87_lock() return value
2026-03-25 11:05:38 +01:00
hwspinlock
…
hwtracing
coresight: etm3x: Fix cpulocked warning on cpuhp
2026-03-04 07:20:10 -05:00
i2c
…
i3c
i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
2026-03-04 07:20:31 -05:00
idle
…
iio
iio: gyro: itg3200: Fix unchecked return value in read_raw
2026-03-04 07:21:13 -05:00
infiniband
RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
2026-03-25 11:05:37 +01:00
input
Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
2026-01-30 10:27:34 +01:00
interconnect
interconnect: debugfs: initialize src_node and dst_node to empty strings
2026-01-30 10:27:35 +01:00
iommu
iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
2026-03-04 07:21:11 -05:00
ipack
…
irqchip
irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
2026-03-25 11:05:29 +01:00
isdn
mISDN: annotate data-race around dev->work
2026-01-30 10:27:36 +01:00
leds
leds: qcom-lpg: Check the return value of regmap_bulk_write()
2026-03-04 07:20:14 -05:00
macintosh
…
mailbox
mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
2026-03-25 11:05:34 +01:00
mcb
…
md
dm mpath: make pg_init_delay_msecs settable
2026-03-04 07:21:12 -05:00
media
media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
2026-03-25 11:05:35 +01:00
memory
memory: mtk-smi: fix device leak on larb probe
2026-03-25 11:05:31 +01:00
memstick
…
message
…
mfd
mfd: omap-usb-host: Fix OF populate on driver rebind
2026-03-25 11:05:34 +01:00
misc
misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
2026-03-04 07:20:54 -05:00
mmc
Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
2026-03-04 07:20:10 -05:00
most
…
mtd
mtd: rawnand: pl353: Fix software ECC support
2026-03-04 07:21:15 -05:00
mux
…
net
net: usb: lan78xx: skip LTM configuration for LAN7850
2026-03-25 11:05:48 +01:00
nfc
nfc: pn533: properly drop the usb interface reference on disconnect
2026-03-25 11:05:36 +01:00
ntb
NTB: ntb_transport: Fix too small buffer for debugfs_name
2026-03-04 07:21:20 -05:00
nubus
…
nvdimm
nvdimm: virtio_pmem: serialize flush requests
2026-03-04 07:20:04 -05:00
nvme
nvme-pci: Fix race bug in nvme_poll_irqdisable()
2026-03-25 11:05:47 +01:00
nvmem
nvmem: Drop OF node reference on nvmem_add_one_cell() failure
2026-03-04 07:21:12 -05:00
of
of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy()
2026-03-04 07:19:49 -05:00
opp
…
parisc
…
parport
…
pci
PCI: Use resource_set_range() that correctly sets ->end
2026-03-25 11:05:31 +01:00
pcmcia
…
peci
…
perf
perf/arm-cmn: Reject unsupported hardware configurations
2026-03-04 07:21:14 -05:00
phy
phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
2026-03-04 07:20:55 -05:00
pinctrl
pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
2026-03-25 11:05:38 +01:00
platform
platform/x86: thinkpad_acpi: Fix errors reading battery thresholds
2026-03-25 11:05:38 +01:00
pmdomain
pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
2026-02-11 13:39:08 +01:00
pnp
…
power
power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer
2026-03-04 07:20:03 -05:00
powercap
powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check
2026-03-04 07:20:15 -05:00
pps
…
ps3
…
ptp
…
pwm
…
rapidio
rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
2026-03-04 07:21:13 -05:00
ras
…
regulator
regulator: pca9450: Correct interrupt type
2026-03-25 11:05:47 +01:00
remoteproc
remoteproc: mediatek: Unprepare SCP clock during system suspend
2026-03-25 11:05:44 +01:00
reset
…
rpmsg
rpmsg: core: fix race in driver_override_show() and use core helper
2026-03-04 07:21:02 -05:00
rtc
rtc: zynqmp: correct frequency value
2026-03-04 07:20:58 -05:00
s390
s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
2026-03-04 07:19:29 -05:00
sbus
…
scsi
scsi: ses: Fix devices attaching to different hosts
2026-03-25 11:05:44 +01:00
sh
…
siox
…
slimbus
slimbus: core: fix device reference leak on report present
2026-01-30 10:27:39 +01:00
soc
soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
2026-03-04 07:21:08 -05:00
soundwire
soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15)
2026-03-04 07:20:52 -05:00
spi
spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end
2026-03-04 07:20:42 -05:00
spmi
…
ssb
…
staging
media: tegra-video: Fix memory leak in __tegra_channel_try_format()
2026-03-25 11:05:32 +01:00
target
scsi: target: Fix recursive locking in __configfs_open_file()
2026-03-25 11:05:37 +01:00
tc
…
tee
…
thermal
thermal: int340x: Fix sysfs group leak on DLVR registration failure
2026-03-04 07:20:56 -05:00
thunderbolt
…
tty
serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done
2026-03-04 07:20:54 -05:00
ufs
scsi: ufs: core: Fix shift out of bounds when MAXQ=32
2026-03-25 11:05:44 +01:00
uio
…
usb
USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
2026-03-25 11:05:49 +01:00
vdpa
…
vfio
hisi_acc_vfio_pci: update status after RAS error
2026-03-04 07:20:51 -05:00
vhost
vhost: fix caching attributes of MMIO regions by setting them explicitly
2026-03-04 07:20:51 -05:00
video
fbcon: Remove struct fbcon_display.inverse
2026-03-04 07:21:19 -05:00
virt
…
virtio
…
vlynq
…
w1
w1: fix redundant counter decrement in w1_attach_slave_device()
2026-01-30 10:27:34 +01:00
watchdog
watchdog: imx7ulp_wdt: handle the nowayout option
2026-03-04 07:20:54 -05:00
xen
xen/acpi-processor: fix _CST detection using undersized evaluation buffer
2026-03-25 11:05:40 +01:00
zorro
…
Kconfig
…
Makefile
…