averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-04-08 12:02:33 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
c10fed329c1c104f375a75ed97ea3abef0786d62
linux-stable-mirror/drivers
History
Fei Shao c10fed329c spi: spi-mt65xx: Fix NULL pointer access in interrupt handler 
[ Upstream commit a20ad45008 ]

The TX buffer in spi_transfer can be a NULL pointer, so the interrupt
handler may end up writing to the invalid memory and cause crashes.

Add a check to trans->tx_buf before using it.

Fixes: 1ce24864bf ("spi: mediatek: Only do dma for 4-byte aligned buffers")
Signed-off-by: Fei Shao <fshao@chromium.org>
Reviewed-by: AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com>
Link: https://msgid.link/r/20240321070942.1587146-2-fshao@chromium.org
Signed-off-by: Mark Brown <broonie@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-03-26 18:21:37 -04:00
..
accessibility
…
acpi
ACPI: scan: Fix device check notification handling
2024-03-26 18:21:21 -04:00
amba
…
android
…
ata
ata: ahci_ceva: fix error handling for Xilinx GT PHY support
2024-03-01 13:21:58 +01:00
atm
…
auxdisplay
…
base
regmap: Add bulk read/write callbacks into regmap_config
2024-03-15 10:48:23 -04:00
bcma
…
block
aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
2024-03-26 18:21:15 -04:00
bluetooth
Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
2024-03-26 18:21:22 -04:00
bus
bus: tegra-aconnect: Update dependency to ARCH_TEGRA
2024-03-26 18:21:19 -04:00
cdrom
…
char
…
clk
clk: zynq: Prevent null pointer dereference caused by kmalloc failure
2024-03-26 18:21:32 -04:00
clocksource
…
comedi
comedi: comedi_test: Prevent timers rescheduling during deletion
2024-03-26 18:21:34 -04:00
connector
…
counter
…
cpufreq
cpufreq: mediatek-hw: Don't error out if supply is not found
2024-03-26 18:21:17 -04:00
cpuidle
…
crypto
crypto: xilinx - call finalize with bh disabled
2024-03-26 18:21:27 -04:00
cxl
…
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
2024-03-26 18:21:25 -04:00
dma-buf
…
edac
…
eisa
…
extcon
…
firewire
firewire: core: use long bus reset on gap count error
2024-03-26 18:21:13 -04:00
firmware
efi/capsule-loader: fix incorrect allocation size
2024-03-06 14:38:48 +00:00
fpga
…
fsi
…
gnss
…
gpio
gpio: fix resource unwinding order in error path
2024-03-06 14:38:50 +00:00
gpu
nouveau: reset the bo resource bus info after an eviction
2024-03-26 18:21:35 -04:00
greybus
…
hid
HID: amd_sfh: Update HPD sensor structure elements
2024-03-26 18:21:30 -04:00
hsi
…
hv
…
hwmon
…
hwspinlock
…
hwtracing
…
i2c
i2c: imx: when being a target, mark the last read as processed
2024-03-01 13:22:00 +01:00
i3c
…
idle
…
iio
…
infiniband
RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
2024-03-26 18:21:33 -04:00
input
Input: gpio_keys_polled - suppress deferred probe error for gpio
2024-03-26 18:21:13 -04:00
interconnect
Revert "interconnect: Teach lockdep about icc_bw_lock order"
2024-03-06 14:38:50 +00:00
iommu
iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
2024-03-26 18:21:21 -04:00
ipack
…
irqchip
…
isdn
…
leds
leds: sgm3140: Add missing timer cleanup and flash gpio control
2024-03-26 18:21:31 -04:00
macintosh
…
mailbox
…
mcb
…
md
dm: call the resume method on internal suspend
2024-03-26 18:21:24 -04:00
media
media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
2024-03-26 18:21:30 -04:00
memory
…
memstick
…
message
…
mfd
mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref
2024-03-26 18:21:29 -04:00
misc
…
mmc
mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function
2024-03-26 18:21:21 -04:00
most
…
mtd
mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
2024-03-26 18:21:30 -04:00
mux
…
net
net: dsa: mt7530: fix handling of all link-local frames
2024-03-26 18:21:37 -04:00
nfc
…
ntb
NTB: fix possible name leak in ntb_register_device()
2024-03-26 18:21:28 -04:00
nubus
…
nvdimm
…
nvme
…
nvmem
…
of
…
opp
OPP: debugfs: Fix warning around icc_get_name()
2024-03-26 18:21:23 -04:00
parisc
…
parport
…
pci
PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
2024-03-26 18:21:29 -04:00
pcmcia
…
perf
…
phy
…
pinctrl
pinctrl: mediatek: Drop bogus slew rate register range for MT8192
2024-03-26 18:21:26 -04:00
platform
…
pnp
…
power
power: supply: bq27xxx-i2c: Do not free non existing IRQ
2024-03-06 14:38:48 +00:00
powercap
…
pps
…
ps3
…
ptp
…
pwm
pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
2024-03-26 18:21:18 -04:00
rapidio
…
ras
…
regulator
…
remoteproc
remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef
2024-03-26 18:21:34 -04:00
reset
…
rpmsg
…
rtc
rtc: mt6397: select IRQ_DOMAIN instead of depending on it
2024-03-26 18:21:34 -04:00
s390
s390/dasd: fix double module refcount decrement
2024-03-26 18:21:14 -04:00
sbus
…
scsi
scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
2024-03-26 18:21:33 -04:00
sh
…
siox
…
slimbus
…
soc
soc: fsl: dpio: fix kcalloc() argument order
2024-03-26 18:21:35 -04:00
soundwire
…
spi
spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
2024-03-26 18:21:37 -04:00
spmi
…
ssb
…
staging
staging: greybus: fix get_channel_from_mode() failure path
2024-03-26 18:21:34 -04:00
target
…
tc
…
tee
…
thermal
…
thunderbolt
…
tty
serial: 8250_exar: Don't remove GPIO device on suspend
2024-03-26 18:21:34 -04:00
uio
…
usb
usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
2024-03-26 18:21:35 -04:00
vdpa
vdpa/mlx5: Allow CVQ size changes
2024-03-26 18:21:36 -04:00
vfio
…
vhost
…
video
backlight: lp8788: Fully initialize backlight_properties during probe
2024-03-26 18:21:31 -04:00
virt
…
virtio
…
visorbus
…
vlynq
…
vme
…
w1
…
watchdog
watchdog: stm32_iwdg: initialize default timeout
2024-03-26 18:21:33 -04:00
xen
…
zorro
…
Kconfig
…
Makefile
…