averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-14 21:43:02 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
bf04132cd64ccde4e9e9765d489c83fe83c09b7f
linux-stable-mirror/drivers
T
History
Dan CarpenterandGreg Kroah-Hartman bf04132cd6 vhost-vdpa: fix use after free in vhost_vdpa_probe() 
[ Upstream commit e07754e0a1 ]

The put_device() calls vhost_vdpa_release_dev() which calls
ida_simple_remove() and frees "v".  So this call to
ida_simple_remove() is a use after free and a double free.

Fixes: ebe6a354fa ("vhost-vdpa: Call ida_simple_remove() when failed")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Message-Id: <cf53cb61-0699-4e36-a980-94fd4268ff00@moroto.mountain>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Acked-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-11-28 17:19:49 +00:00
..
accel
…
accessibility
…
acpi
ACPI: EC: Add quirk for HP 250 G7 Notebook PC
2023-11-28 17:19:38 +00:00
amba
…
android
…
ata
…
atm
atm: iphase: Do PCI error checks on own line
2023-11-28 17:19:43 +00:00
auxdisplay
…
base
regmap: prevent noinc writes from clobbering cache
2023-11-20 11:59:33 +01:00
bcma
…
block
virtio-blk: fix implicit overflow on virtio_max_dma_size
2023-11-28 17:19:46 +00:00
bluetooth
Bluetooth: btusb: Add date->evt_skb is NULL check
2023-11-28 17:19:38 +00:00
bus
…
cache
…
cdrom
…
cdx
…
char
…
clk
…
clocksource
clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware
2023-11-28 17:19:36 +00:00
comedi
…
connector
…
counter
…
cpufreq
…
cpuidle
…
crypto
crypto: hisilicon/qm - prevent soft lockup in receive loop
2023-11-28 17:19:44 +00:00
cxl
cxl/hdm: Remove broken error path
2023-11-20 11:59:31 +01:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()
2023-11-20 11:59:26 +01:00
dma-buf
…
edac
…
eisa
…
extcon
…
firewire
…
firmware
…
fpga
…
fsi
…
gnss
…
gpio
gpiolib: of: Add quirk for mt2701-cs42448 ASoC sound
2023-11-28 17:19:43 +00:00
gpu
drm/i915/tc: Fix -Wformat-truncation in intel_tc_port_init
2023-11-28 17:19:49 +00:00
greybus
…
hid
HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W
2023-11-28 17:19:44 +00:00
hsi
…
hte
…
hv
…
hwmon
…
hwspinlock
…
hwtracing
…
i2c
i2c: dev: copy userspace array safely
2023-11-28 17:19:47 +00:00
i3c
i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.
2023-11-28 17:19:46 +00:00
idle
…
iio
iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
2023-11-28 17:19:45 +00:00
infiniband
RDMA/hfi1: Use FIELD_GET() to extract Link Width
2023-11-28 17:19:42 +00:00
input
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
2023-11-20 11:59:34 +01:00
interconnect
interconnect: fix error handling in qnoc_probe()
2023-11-20 11:59:27 +01:00
iommu
…
ipack
…
irqchip
…
isdn
…
leds
leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu'
2023-11-20 11:59:24 +01:00
macintosh
…
mailbox
…
mcb
…
md
md: don't rely on 'mddev->pers' to be set in mddev_suspend()
2023-11-28 17:19:39 +00:00
media
media: imon: fix access to invalid resource for the second interface
2023-11-28 17:19:47 +00:00
memory
…
memstick
…
message
…
mfd
mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs
2023-11-28 17:19:44 +00:00
misc
misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller
2023-11-28 17:19:44 +00:00
mmc
Revert "mmc: core: Capture correct oemid-bits for eMMC cards"
2023-11-20 11:59:39 +01:00
most
…
mtd
mtd: rawnand: meson: check return value of devm_kasprintf()
2023-11-28 17:19:48 +00:00
mux
…
net
wifi: iwlwifi: Use FW rate for non-data frames
2023-11-28 17:19:48 +00:00
nfc
…
ntb
…
nubus
…
nvdimm
…
nvme
nvme: fix error-handling for io_uring nvme-passthrough
2023-11-20 11:59:35 +01:00
nvmem
…
of
of: address: Fix address translation when address-size is greater than 2
2023-11-28 17:19:39 +00:00
opp
…
parisc
…
parport
…
pci
PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk
2023-11-28 17:19:44 +00:00
pcmcia
pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
2023-11-20 11:59:31 +01:00
peci
…
perf
arm64/arm: arm_pmuv3: perf: Don't truncate 64-bit registers
2023-11-20 11:59:38 +01:00
phy
phy: qualcomm: phy-qcom-eusb2-repeater: Zero out untouched tuning regs
2023-11-28 17:19:45 +00:00
pinctrl
pinctrl: renesas: rzg2l: Make reverse order of enable() for disable()
2023-11-20 11:59:25 +01:00
platform
platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e
2023-11-28 17:19:39 +00:00
pmdomain
…
pnp
…
power
…
powercap
…
pps
…
ps3
…
ptp
…
pwm
pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
2023-11-20 11:59:34 +01:00
rapidio
…
ras
…
regulator
…
remoteproc
…
reset
…
rpmsg
…
rtc
rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
2023-11-20 11:59:30 +01:00
s390
s390/ap: re-init AP queues on config on
2023-11-20 11:59:28 +01:00
sbus
…
scsi
scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
2023-11-28 17:19:43 +00:00
sh
…
siox
…
slimbus
…
soc
soc: qcom: pmic: Fix resource leaks in a device_for_each_child_node() loop
2023-11-28 17:19:41 +00:00
soundwire
soundwire: dmi-quirks: update HP Omen match
2023-11-28 17:19:45 +00:00
spi
spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies
2023-11-20 11:59:38 +01:00
spmi
…
ssb
…
staging
media: cedrus: Fix clock/reset sequence
2023-11-20 11:59:32 +01:00
target
…
tc
…
tee
…
thermal
…
thunderbolt
thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager
2023-11-28 17:19:45 +00:00
tty
tty: vcc: Add check for kstrdup() in vcc_probe()
2023-11-28 17:19:45 +00:00
ufs
scsi: ufs: core: Leave space for '\0' in utf8 desc string
2023-11-20 11:59:22 +01:00
uio
…
usb
usb: gadget: f_ncm: Always set current gadget in ncm_bind()
2023-11-28 17:19:45 +00:00
vdpa
vdpa_sim_blk: allocate the buffer zeroed
2023-11-28 17:19:49 +00:00
vfio
…
vhost
vhost-vdpa: fix use after free in vhost_vdpa_probe()
2023-11-28 17:19:49 +00:00
video
fbdev: fsl-diu-fb: mark wr_reg_wa() static
2023-11-20 11:59:38 +01:00
virt
virt: sevguest: Fix passing a stack buffer as a scatterlist target
2023-11-20 11:59:30 +01:00
virtio
…
vlynq
…
w1
…
watchdog
watchdog: ixp4xx: Make sure restart always works
2023-11-20 11:59:34 +01:00
xen
…
zorro
…
Kconfig
…
Makefile
…