Niklas NeroninandGreg Kroah-Hartman 9a24eb8010 usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB ...

[ Upstream commit 66cb618bf0 ]

Some transfer events don't always point to a TRB, and consequently don't
have a endpoint ring. In these cases, function handle_tx_event() should
not proceed, because if 'ep->skip' is set, the pointer to the endpoint
ring is used.

To prevent a potential failure and make the code logical, return after
checking the completion code for a Transfer event without TRBs.

Signed-off-by: Niklas Neronin <niklas.neronin@linux.intel.com>
Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>
Link: https://lore.kernel.org/r/20240429140245.3955523-11-mathias.nyman@linux.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-07-11 12:49:06 +02:00

..

accel

kthread: add kthread_stop_put

2024-06-12 11:12:52 +02:00

accessibility

speakup: Fix sizeof() vs ARRAY_SIZE() bug

2024-06-12 11:11:18 +02:00

acpi

ACPI: EC: Evaluate orphan _REG under EC device

2024-06-27 13:49:10 +02:00

amba

…

android

binder: fix max_thread type inconsistency

2024-05-25 16:22:54 +02:00

ata

ata: libata-core: Fix double free on error

2024-07-05 09:34:04 +02:00

atm

…

auxdisplay

…

base

drivers: core: synchronize really_probe() and dev_uevent()

2024-06-21 14:38:37 +02:00

bcma

…

block

nbd: Fix signal handling

2024-06-27 13:49:14 +02:00

bluetooth

Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl

2024-06-27 13:49:02 +02:00

bus

…

cache

…

cdrom

…

cdx

…

char

tpm_tis: Do *not* flush uninitialized work

2024-06-16 13:47:41 +02:00

clk

clkdev: Update clkdev id usage to allow for longer names

2024-06-21 14:38:38 +02:00

clocksource

…

comedi

…

connector

…

counter

counter: ti-eqep: enable clock at probe

2024-07-05 09:33:56 +02:00

cpufreq

Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units"

2024-07-05 09:34:05 +02:00

cpuidle

…

crypto

crypto: hisilicon/debugfs - Fix debugfs uninit process issue

2024-07-11 12:49:02 +02:00

cxl

cxl/region: check interleave capability

2024-07-05 09:34:07 +02:00

dax

…

dca

…

devfreq

…

dio

…

dma

dmaengine: ioatdma: Fix missing kmem_cache_destroy()

2024-06-27 13:49:09 +02:00

dma-buf

dma-buf: handle testing kthreads creation failure

2024-06-21 14:38:40 +02:00

edac

EDAC/igen6: Convert PCIBIOS_* return codes to errnos

2024-06-16 13:47:47 +02:00

eisa

…

extcon

extcon: max8997: select IRQ_DOMAIN instead of depending on it

2024-06-12 11:12:27 +02:00

firewire

firewire: ohci: fulfill timestamp for some local asynchronous transaction

2024-05-17 12:02:30 +02:00

firmware

firmware: dmi: Stop decoding on broken entry

2024-07-11 12:49:06 +02:00

fpga

fpga: region: add owner module and take its refcount

2024-06-12 11:12:23 +02:00

fsi

…

gnss

…

gpio

gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)

2024-07-05 09:33:54 +02:00

gpu

drm/amdgpu: fix the warning about the expression (int)size - len

2024-07-11 12:49:06 +02:00

greybus

greybus: Fix use-after-free bug in gb_interface_release due to race condition.

2024-06-21 14:38:48 +02:00

hid

hid: asus: asus_report_fixup: fix potential read out of bounds

2024-06-27 13:49:15 +02:00

hsi

…

hte

…

hv

Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted

2024-05-17 12:02:17 +02:00

hwmon

hwmon: (shtc1) Fix property misspelling

2024-06-12 11:13:00 +02:00

hwspinlock

…

hwtracing

intel_th: pci: Add Lunar Lake support

2024-06-21 14:38:43 +02:00

i2c

i2c: testunit: discard write requests while old command is running

2024-07-05 09:33:56 +02:00

i3c

i3c: master: svc: fix invalidate IBI type and miss call client IBI handler

2024-06-16 13:47:46 +02:00

idle

…

iio

iio: chemical: bme680: Fix sensor data read operation

2024-07-05 09:33:58 +02:00

infiniband

IB/core: Implement a limit on UMAD receive List

2024-07-11 12:49:03 +02:00

input

Input: ff-core - prefer struct_size over open coded arithmetic

2024-07-11 12:49:06 +02:00

interconnect

interconnect: qcom: qcm2290: Fix mas_snoc_bimc QoS port assignment

2024-06-12 11:12:18 +02:00

iommu

iommu/arm-smmu-v3: Free MSIs in case of ENOMEM

2024-06-27 13:49:03 +02:00

ipack

…

irqchip

irqchip/loongson-liointc: Set different ISRs for different cores

2024-07-05 09:34:01 +02:00

isdn

…

leds

leds: an30259a: Use devm_mutex_init() for mutex initialization

2024-07-11 12:49:02 +02:00

macintosh

macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"

2024-06-12 11:11:47 +02:00

mailbox

…

mcb

…

md

md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING

2024-06-16 13:47:34 +02:00

media

media: dw2102: Don't translate i2c read into write

2024-07-11 12:49:06 +02:00

memory

…

memstick

…

message

…

mfd

…

misc

misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe()

2024-06-21 14:38:49 +02:00

mmc

mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()

2024-07-05 09:33:55 +02:00

most

…

mtd

mtd: partitions: redboot: Added conversion of operands to a larger type

2024-07-05 09:33:51 +02:00

mux

…

net

can: mcp251xfd: fix infinite loop when xmit fails

2024-07-05 09:34:04 +02:00

nfc

…

ntb

…

nubus

…

nvdimm

…

nvme

nvmet-passthru: propagate status from id override functions

2024-06-21 14:38:35 +02:00

nvmem

nvmem: add explicit config option to read old syntax fixed OF cells

2024-05-17 12:01:55 +02:00

of

of: module: add buffer overflow check in of_modalias()

2024-06-12 11:12:10 +02:00

opp

…

parisc

…

parport

…

pci

PCI/MSI: Fix UAF in msi_capability_init

2024-07-05 09:34:01 +02:00

pcmcia

…

peci

…

perf

perf/arm-dmc620: Fix lockdep assert in ->event_init()

2024-06-12 11:12:46 +02:00

phy

phy: qcom: qmp-combo: fix duplicate return in qmp_v4_configure_dp_phy

2024-06-12 11:12:14 +02:00

pinctrl

pinctrl: qcom: spmi-gpio: drop broken pm8008 support

2024-07-05 09:33:54 +02:00

platform

platform/x86: p2sb: Don't init until unassigned resources have been assigned

2024-06-27 13:49:03 +02:00

pmdomain

pmdomain: ti-sci: Fix duplicate PD referrals

2024-06-21 14:38:44 +02:00

pnp

…

power

power: supply: cros_usbpd: provide ID table for avoiding fallback match

2024-06-27 13:49:03 +02:00

powercap

…

pps

…

ps3

…

ptp

ptp: fix integer overflow in max_vclocks_store

2024-06-27 13:49:07 +02:00

pwm

pwm: stm32: Refuse too small period requests

2024-07-05 09:34:05 +02:00

rapidio

…

ras

…

regulator

regulator: bd71815: fix ramp values

2024-06-27 13:49:09 +02:00

remoteproc

remoteproc: k3-r5: Jump to error handling labels in start/stop errors

2024-06-21 14:38:47 +02:00

reset

…

rpmsg

…

rtc

nvmem: add explicit config option to read old syntax fixed OF cells

2024-05-17 12:01:55 +02:00

s390

s390/ap: Fix crash in AP internal function modify_bitmap()

2024-06-16 13:47:46 +02:00

sbus

…

scsi

scsi: qedf: Make qedf_execute_tmf() non-preemptible

2024-07-11 12:49:03 +02:00

sh

…

siox

…

slimbus

slimbus: qcom-ngd-ctrl: Add timeout for wait operation

2024-05-17 12:02:33 +02:00

soc

soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message

2024-07-05 09:33:52 +02:00

soundwire

soundwire: cadence: fix invalid PDI offset

2024-06-12 11:12:15 +02:00

spi

spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4

2024-06-27 13:49:14 +02:00

spmi

spmi: hisi-spmi-controller: Do not override device identifier

2024-06-21 14:38:40 +02:00

ssb

ssb: Fix potential NULL pointer dereference in ssb_device_uevent()

2024-06-27 13:49:01 +02:00

staging

greybus: arche-ctrl: move device table to its right location

2024-06-12 11:12:17 +02:00

target

scsi: target: Fix SELinux error when systemd-modules loads the target module

2024-05-17 12:02:15 +02:00

tc

…

tee

…

thermal

thermal/drivers/mediatek/lvts_thermal: Return error in case of invalid efuse data

2024-06-27 13:49:09 +02:00

thunderbolt

thunderbolt: debugfs: Fix margin debugfs node creation condition

2024-06-21 14:38:25 +02:00

tty

serial: 8250_omap: Fix Errata i2310 with RX FIFO level check

2024-07-05 09:34:07 +02:00

ufs

scsi: ufs: core: Free memory allocated for model before reinit

2024-06-27 13:49:11 +02:00

uio

uio_hv_generic: Don't free decrypted memory

2024-05-17 12:02:17 +02:00

usb

usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB

2024-07-11 12:49:06 +02:00

vdpa

vduse: Temporarily fail if control queue feature requested

2024-07-05 09:33:50 +02:00

vfio

vfio/pci: Collect hot-reset devices to local buffer

2024-06-27 13:49:05 +02:00

vhost

…

video

fbdev: savage: Handle err return when savagefb_check_var failed

2024-06-16 13:47:37 +02:00

virt

drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()

2024-06-12 11:12:09 +02:00

virtio

virtio: delete vq in vp_find_vqs_msix() when request_irq() fails

2024-06-12 11:12:49 +02:00

vlynq

…

w1

nvmem: add explicit config option to read old syntax fixed OF cells

2024-05-17 12:01:55 +02:00

watchdog

watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin

2024-06-16 13:47:43 +02:00

xen

drivers/xen: Improve the late XenStore init protocol

2024-06-12 11:12:51 +02:00

zorro

…

Kconfig

…

Makefile

…