Pengpeng HouandJohan Hovold 6fcd91ce2a USB: serial: io_ti: reject oversized boot-mode firmware ...

do_boot_mode() copies the firmware payload, excluding its four-byte prefix,
into a fixed 15.5 KiB staging buffer. check_fw_sanity() already proves that
the image contains its seven-byte header and validates the declared image
length and checksum, but it does not impose this boot-mode destination
limit.

Reject images whose payload does not fit before allocating and filling the
staging buffer.

Fixes: d12b219a22 ("edgeport-ti: use request_firmware()")
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Signed-off-by: Johan Hovold <johan@kernel.org>

2026-07-20 16:35:40 +02:00

..

accel

Merge tag 'drm-misc-fixes-2026-07-09' of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes

2026-07-10 13:03:15 +10:00

accessibility

…

acpi

Merge tag 'acpi-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

2026-07-03 15:13:50 -10:00

amba

…

android

rust_binder: clear freeze listener on node removal

2026-07-03 13:54:10 +02:00

ata

Merge tag 'ata-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux

2026-07-10 09:17:00 -07:00

atm

…

auxdisplay

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

base

Merge tag 'regmap-fix-v7.2-merge-window' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap

2026-06-26 10:47:26 -07:00

bcma

…

block

Merge tag 'block-7.2-20260710' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux

2026-07-11 09:35:33 -07:00

bluetooth

Merge tag 'net-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-07-09 08:26:51 -07:00

bus

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

cache

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

cdrom

…

cdx

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

char

tpm: Make the TPM character devices non-seekable

2026-07-12 12:52:34 -07:00

clk

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

clocksource

…

comedi

…

connector

…

counter

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

cpufreq

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

cpuidle

cpuidle: Allow exit latency to exceed target residency

2026-06-23 14:00:29 +02:00

crypto

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

cxl

…

dax

Merge tag 'mm-stable-2026-06-18-09-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-06-19 10:14:34 -07:00

dca

…

devfreq

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

dibs

dibs: loopback: validate offset and size in move_data()

2026-07-09 12:44:00 +02:00

dio

…

dma

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

dma-buf

Merge drm/drm-fixes into drm-misc-fixes

2026-06-29 17:58:00 +02:00

dpll

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

edac

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

eisa

…

extcon

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

firewire

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

firmware

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

fpga

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

fsi

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

fwctl

…

gnss

…

gpib

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

gpio

gpio: mvebu: free generic chips on unbind

2026-07-08 14:05:11 +02:00

gpu

nouveau/vmm: fix another SPT/LPT race

2026-07-10 14:19:23 +10:00

greybus

…

hid

Merge tag 'char-misc-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2026-07-12 12:37:28 -07:00

hsi

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

hte

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

hv

Merge tag 'hyperv-next-signed-20260621' of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux

2026-06-22 08:06:13 -07:00

hwmon

Merge tag 'device-id-rework' of git://git.kernel.org/pub/scm/linux/kernel/git/ukleinek/linux

2026-07-02 20:54:26 -10:00

hwspinlock

…

hwtracing

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

i2c

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

i3c

…

idle

…

iio

Merge tag 'char-misc-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2026-07-12 12:37:28 -07:00

infiniband

…

input

Merge tag 'input-for-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2026-07-11 15:42:55 -07:00

interconnect

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

iommu

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

ipack

…

irqchip

Merge tag 'irq-urgent-2026-07-05' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2026-07-05 05:29:41 -10:00

leds

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

macintosh

…

mailbox

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

mcb

…

md

dm thin metadata: fix superblock refcount leak on snapshot shadow failure

2026-07-11 15:18:51 +02:00

media

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

memory

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

memstick

…

message

…

mfd

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

misc

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

mmc

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

most

…

mtd

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

mux

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

net

Merge tag 'net-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-07-09 08:26:51 -07:00

nfc

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

ntb

Merge tag 'ntb-7.2' of https://github.com/jonmason/ntb

2026-06-28 07:46:12 -07:00

nubus

…

nvdimm

Merge tag 'libnvdimm-for-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

2026-06-18 16:27:58 -07:00

nvme

Merge tag 'block-7.2-20260625' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux

2026-06-25 09:56:47 -07:00

nvmem

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

of

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

opp

…

parisc

…

parport

…

pci

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

pcmcia

…

peci

…

perf

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

phy

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

pinctrl

Merge tag 'gpio-fixes-for-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux

2026-07-03 05:38:12 -10:00

platform

Merge tag 'platform-drivers-x86-v7.2-2' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86

2026-07-10 09:51:45 -07:00

pmdomain

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

pnp

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

power

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

powercap

…

pps

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

ps3

…

ptp

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

pwm

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

rapidio

Merge tag 'mm-nonmm-stable-2026-06-21-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-06-21 13:20:19 -07:00

ras

…

regulator

regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK

2026-07-09 01:41:17 +01:00

remoteproc

…

resctrl

…

reset

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

rpmsg

Merge tag 'rpmsg-v7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/remoteproc/linux

2026-06-20 23:31:15 -07:00

rtc

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

s390

s390/zcrypt: Remove the empty file

2026-07-08 17:02:47 +02:00

sbus

…

scsi

Merge tag 'mm-nonmm-stable-2026-06-21-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-06-21 13:20:19 -07:00

sh

…

siox

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

slimbus

…

soc

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

soundwire

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

spi

Merge tag 'spi-fix-v7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi

2026-07-05 05:24:06 -10:00

spmi

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

ssb

…

staging

staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()

2026-07-07 13:43:27 +02:00

target

…

tc

…

tee

…

thermal

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

thunderbolt

Merge tag 'usb-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

2026-06-22 12:09:47 -07:00

tty

Merge tag 'tty-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

2026-07-12 12:29:38 -07:00

ufs

ufs: core: tracing: Do not dereference pointers in TP_printk()

2026-07-07 10:42:28 -04:00

uio

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

usb

USB: serial: io_ti: reject oversized boot-mode firmware

2026-07-20 16:35:40 +02:00

vdpa

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

vfio

vfio/pci: Expose latched module parameter policy in debugfs

2026-06-29 14:26:31 -06:00

vhost

Merge tag 'mm-nonmm-stable-2026-06-21-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-06-21 13:20:19 -07:00

video

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

virt

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

virtio

…

w1

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

watchdog

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

xen

xenbus: reject unterminated directory replies

2026-07-01 10:01:14 +02:00

zorro

…

Kconfig

…

Makefile

…