averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-14 21:43:02 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
c2d65ce1d035b2a575b048c4d5ddae6ec00c0d5b
linux-stable-mirror/drivers
T
History
Ian ForbesandGreg Kroah-Hartman b5df9e06ee drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE 
[ Upstream commit 32b415a9dc ]

This data originates from userspace and is used in buffer offset
calculations which could potentially overflow causing an out-of-bounds
access.

Fixes: 8ce75f8ab9 ("drm/vmwgfx: Update device includes for DX device functionality")
Reported-by: Rohit Keshri <rkeshri@redhat.com>
Signed-off-by: Ian Forbes <ian.forbes@broadcom.com>
Reviewed-by: Maaz Mombasawala <maaz.mombasawala@broadcom.com>
Signed-off-by: Zack Rusin <zack.rusin@broadcom.com>
Link: https://patch.msgid.link/20251021190128.13014-1-ian.forbes@broadcom.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-11-24 10:30:02 +01:00
..
accel
accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
2025-11-24 10:29:44 +01:00
accessibility
…
acpi
acpi,srat: Fix incorrect device handle check for Generic Initiator
2025-11-24 10:30:01 +01:00
amba
…
android
…
ata
…
atm
…
auxdisplay
…
base
…
bcma
…
block
…
bluetooth
Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
2025-11-24 10:29:58 +01:00
bus
…
cache
…
cdrom
…
cdx
…
char
char: misc: restrict the dynamic range to exclude reserved minors
2025-11-24 10:29:46 +01:00
clk
clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
2025-11-24 10:29:48 +01:00
clocksource
…
comedi
…
connector
…
counter
…
cpufreq
cpufreq: tegra186: Initialize all cores to max frequencies
2025-11-24 10:29:48 +01:00
cpuidle
…
crypto
crypto: caam - double the entropy delay interval for retry
2025-11-24 10:29:38 +01:00
cxl
…
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: dw-edma: Set status for callback_result
2025-11-24 10:29:32 +01:00
dma-buf
…
edac
…
eisa
…
extcon
extcon: adc-jack: Cleanup wakeup source only if it was enabled
2025-11-24 10:29:55 +01:00
firewire
…
firmware
…
fpga
…
fsi
…
gnss
…
gpio
…
gpu
drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
2025-11-24 10:30:02 +01:00
greybus
…
hid
HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel
2025-11-24 10:29:57 +01:00
hsi
…
hte
…
hv
…
hwmon
…
hwspinlock
…
hwtracing
…
i2c
…
i3c
…
idle
…
iio
iio: adc: imx93_adc: load calibrated values even calibration failed
2025-11-24 10:29:28 +01:00
infiniband
RDMA/hns: Fix wrong WQE data when QP wraps around
2025-11-24 10:29:47 +01:00
input
…
interconnect
…
iommu
iommufd: Make vfio_compat's unmap succeed if the range is already empty
2025-11-24 10:29:56 +01:00
ipack
…
irqchip
…
isdn
…
leds
…
macintosh
…
mailbox
…
mcb
…
md
…
media
media: uvcvideo: Use heuristic to find stream entity
2025-11-24 10:29:50 +01:00
memory
…
memstick
…
message
…
mfd
…
misc
…
mmc
…
most
…
mtd
…
mux
…
net
virtio-net: fix incorrect flags recording in big mode
2025-11-24 10:30:00 +01:00
nfc
…
ntb
NTB: epf: Allow arbitrary BAR mapping
2025-11-24 10:29:48 +01:00
nubus
…
nvdimm
…
nvme
…
nvmem
…
of
…
opp
…
parisc
…
parport
…
pci
PCI/PM: Skip resuming to D0 if device is disconnected
2025-11-24 10:29:42 +01:00
pcmcia
…
peci
…
perf
…
phy
phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
2025-11-24 10:29:36 +01:00
pinctrl
…
platform
…
pmdomain
…
pnp
…
power
…
powercap
…
pps
…
ps3
…
ptp
ptp: Limit time setting of PTP clocks
2025-11-24 10:29:32 +01:00
pwm
…
rapidio
…
ras
…
regulator
regulator: fixed: fix GPIO descriptor leak on register failure
2025-11-24 10:30:01 +01:00
remoteproc
remoteproc: qcom: q6v5: Avoid handling handover twice
2025-11-24 10:29:42 +01:00
reset
…
rpmsg
…
rtc
rtc: rx8025: fix incorrect register reference
2025-11-24 10:29:54 +01:00
s390
…
sbus
…
scsi
scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate
2025-11-24 10:29:43 +01:00
sh
…
siox
…
slimbus
…
soc
…
soundwire
…
spi
…
spmi
…
ssb
…
staging
…
target
…
tc
…
tee
…
thermal
…
thunderbolt
…
tty
…
ufs
scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers
2025-11-24 10:29:55 +01:00
uio
…
usb
usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
2025-11-24 10:29:40 +01:00
vdpa
…
vfio
vfio: return -ENOTTY for unsupported device feature
2025-11-24 10:29:42 +01:00
vhost
…
video
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
2025-11-24 10:29:49 +01:00
virt
…
virtio
…
vlynq
…
w1
…
watchdog
watchdog: s3c2410_wdt: Fix max_timeout being calculated larger
2025-11-24 10:29:37 +01:00
xen
…
zorro
…
Kconfig
…
Makefile
…