Gavrilov IliaandGreg Kroah-Hartman f2a5ec7f7b iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter ...

[ Upstream commit b6b26d86c6 ]

The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow,
because the string specifier in the format string sscanf()
has no width limitation.

Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.

Fixes: ca3bf5d47c ("iommu/amd: Introduces ivrs_acpihid kernel parameter")
Cc: stable@vger.kernel.org
Signed-off-by: Ilia.Gavrilov <Ilia.Gavrilov@infotecs.ru>
Reviewed-by: Kim Phillips <kim.phillips@amd.com>
Link: https://lore.kernel.org/r/20230202082719.1513849-1-Ilia.Gavrilov@infotecs.ru
Signed-off-by: Joerg Roedel <jroedel@suse.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-03-17 08:45:13 +01:00

..

amd

iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter

2023-03-17 08:45:13 +01:00

arm

iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop

2022-08-21 15:16:09 +02:00

intel

iommu/vt-d: Fix PASID directory pointer coherency

2023-03-17 08:45:08 +01:00

dma-iommu.c

…

exynos-iommu.c

…

fsl_pamu_domain.c

…

fsl_pamu_domain.h

…

fsl_pamu.c

iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()

2023-01-14 10:16:05 +01:00

fsl_pamu.h

…

hyperv-iommu.c

…

io-pgtable-arm-v7s.c

…

io-pgtable-arm.c

…

io-pgtable-arm.h

…

io-pgtable.c

…

ioasid.c

…

iommu-debugfs.c

…

iommu-sysfs.c

…

iommu-traces.c

…

iommu.c

…

iova.c

…

ipmmu-vmsa.c

…

irq_remapping.c

…

irq_remapping.h

…

Kconfig

…

Makefile

…

msm_iommu_hw-8xxx.h

…

msm_iommu.c

…

msm_iommu.h

…

mtk_iommu_v1.c

iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()

2023-01-18 11:45:00 +01:00

mtk_iommu.c

…

mtk_iommu.h

…

of_iommu.c

…

omap-iommu-debug.c

iommu/omap: Fix buffer overflow in debugfs

2022-10-26 13:25:41 +02:00

omap-iommu.c

…

omap-iommu.h

…

omap-iopgtable.h

…

rockchip-iommu.c

…

s390-iommu.c

…

sun50i-iommu.c

iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY

2023-01-14 10:16:07 +01:00

tegra-gart.c

…

tegra-smmu.c

…

virtio-iommu.c

…