averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-19 21:40:29 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
4f99bde59eef838685dfe5fcb4fbbfb02fb2265a
linux-stable-mirror/drivers
T
History
Dongliang MuandGreg Kroah-Hartman 296f8ca0f7 HID: bigben: fix slab-out-of-bounds Write in bigben_probe 
[ Upstream commit fc4ef9d572 ]

There is a slab-out-of-bounds Write bug in hid-bigbenff driver.
The problem is the driver assumes the device must have an input but
some malicious devices violate this assumption.

Fix this by checking hid_device's input is non-empty before its usage.

Reported-by: syzkaller <syzkaller@googlegroups.com>
Signed-off-by: Dongliang Mu <mudongliangabcd@gmail.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-06-09 10:20:54 +02:00
..
accessibility
…
acpi
ACPI: sysfs: Fix BERT error region memory mapping
2022-05-30 09:33:23 +02:00
amba
…
android
…
ata
ata: pata_marvell: Check the 'bmdma_addr' beforing reading
2022-04-27 13:53:54 +02:00
atm
…
auxdisplay
…
base
firmware_loader: use kernel credentials when reading firmware
2022-05-18 10:23:46 +02:00
bcma
…
block
drbd: remove usage of list iterator variable after loop
2022-05-25 09:17:54 +02:00
bluetooth
Bluetooth: hci_qca: Use del_timer_sync() before freeing
2022-06-06 08:42:43 +02:00
bus
bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
2022-05-09 09:05:04 +02:00
cdrom
…
char
tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe()
2022-06-06 08:42:44 +02:00
clk
clk: at91: generated: consider range when calculating best rate
2022-05-25 09:17:58 +02:00
clocksource
…
connector
…
counter
…
cpufreq
cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
2022-05-09 09:05:03 +02:00
cpuidle
…
crypto
crypto: caam - fix i.MX6SX entropy delay value
2022-06-06 08:42:43 +02:00
dax
…
dca
…
devfreq
…
dio
…
dma
dma: at_xdmac: fix a missing check on list iterator
2022-04-27 13:53:55 +02:00
dma-buf
…
edac
EDAC/synopsys: Read the error count from the correct register
2022-04-27 13:53:54 +02:00
eisa
…
extcon
…
firewire
firewire: core: extend card->lock in fw_core_handle_bus_reset
2022-05-12 12:25:32 +02:00
firmware
…
fpga
…
fsi
…
gnss
…
gpio
gpio: mvebu/pwm: Refuse requests with inverted polarity
2022-05-25 09:18:00 +02:00
gpu
drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
2022-06-09 10:20:53 +02:00
greybus
…
hid
HID: bigben: fix slab-out-of-bounds Write in bigben_probe
2022-06-09 10:20:54 +02:00
hsi
…
hv
random: remove unused irq_flags argument from add_interrupt_randomness()
2022-05-30 09:33:27 +02:00
hwmon
hwmon: (f71882fg) Fix negative temperature
2022-05-18 10:23:45 +02:00
hwspinlock
…
hwtracing
…
i2c
drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers
2022-06-06 08:42:40 +02:00
i3c
…
ide
…
idle
…
iio
iio:imu:bmi160: disable regulator in error path
2022-05-09 09:05:00 +02:00
infiniband
RDMA/siw: Fix a condition race issue in MPA request processing
2022-05-12 12:25:39 +02:00
input
Input: ili210x - fix reset timing
2022-05-25 09:18:01 +02:00
interconnect
…
iommu
iommu/vt-d: Add RPLS to quirk list to skip TE disabling
2022-06-09 10:20:49 +02:00
ipack
…
irqchip
…
isdn
…
leds
…
lightnvm
lightnvm: disable the subsystem
2022-05-09 09:04:56 +02:00
macintosh
…
mailbox
…
mcb
…
md
md/bitmap: don't set sb values if can't pass sanity check
2022-06-09 10:20:52 +02:00
media
media: cx25821: Fix the warning when removing the module
2022-06-09 10:20:52 +02:00
memory
memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode
2022-05-09 09:05:02 +02:00
memstick
…
message
…
mfd
…
misc
…
mmc
drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit
2022-06-09 10:20:52 +02:00
most
…
mtd
mtd: rawnand: Fix return value check of wait_for_completion_timeout
2022-05-09 09:05:02 +02:00
mux
…
net
mlxsw: Treat LLDP packets as control
2022-06-09 10:20:53 +02:00
nfc
nfc: pn533: Fix buggy cleanup order
2022-06-06 08:42:40 +02:00
ntb
…
nubus
…
nvdimm
…
nvme
nvme-multipath: fix hang when disk goes live over reconnect
2022-05-25 09:17:53 +02:00
nvmem
…
of
…
opp
…
oprofile
…
parisc
…
parport
…
pci
PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold
2022-05-25 09:17:55 +02:00
pcmcia
…
perf
arm_pmu: Validate single/group leader events
2022-04-27 13:53:55 +02:00
phy
phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
2022-05-09 09:05:01 +02:00
pinctrl
pinctrl: sunxi: fix f1c100s uart2 function
2022-06-06 08:42:40 +02:00
platform
platform/chrome: cros_ec_debugfs: detach log reader wq from devm
2022-05-25 09:17:54 +02:00
pnp
…
power
…
powercap
…
pps
…
ps3
…
ptp
…
pwm
…
rapidio
…
ras
…
regulator
regulator: wm8994: Add an off-on delay for WM8994 variant
2022-04-20 09:23:22 +02:00
remoteproc
…
reset
reset: tegra-bpmp: Restore Handle errors in BPMP response
2022-04-27 13:53:52 +02:00
rpmsg
…
rtc
rtc: mc146818-lib: Fix the AltCentury for AMD platforms
2022-05-25 09:17:54 +02:00
s390
s390/lcs: fix variable dereferenced before check
2022-05-18 10:23:44 +02:00
sbus
…
scsi
scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()
2022-06-09 10:20:52 +02:00
sfi
…
sh
…
siox
…
slimbus
slimbus: qcom: Fix IRQ check in qcom_slim_probe
2022-05-18 10:23:47 +02:00
soc
…
soundwire
…
spi
spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction
2022-06-09 10:20:51 +02:00
spmi
…
ssb
…
staging
staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan()
2022-05-30 09:33:22 +02:00
target
…
tc
…
tee
…
thermal
thermal: int340x: Fix attr.show callback prototype
2022-05-09 09:05:07 +02:00
thunderbolt
…
tty
serial: 8250_mtk: Fix register address for XON/XOFF character
2022-05-18 10:23:47 +02:00
uio
…
usb
xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI
2022-06-09 10:20:48 +02:00
vdpa
…
vfio
…
vhost
Fix double fget() in vhost_net_set_backend()
2022-05-25 09:17:55 +02:00
video
fbcon: Consistently protect deferred_takeover with console_lock()
2022-06-09 10:20:50 +02:00
virt
…
virtio
…
visorbus
…
vlynq
…
vme
…
w1
…
watchdog
…
xen
…
zorro
…
Kconfig
…
Makefile
…