Dmitry TorokhovandGreg Kroah-Hartman 163c3e7a1d Input: ims-pcu - fix type confusion in CDC union descriptor parsing ...

commit ca459e237b upstream.

The driver currently trusts the bMasterInterface0 from the CDC union
descriptor without verifying that it matches the interface being
probed. This could lead to the driver overwriting the private data of
another interface.

Validate that the control interface found in the descriptor is indeed
the one we are probing.

Fixes: 628329d524 ("Input: add IMS Passenger Control Unit driver")
Cc: stable@vger.kernel.org
Reported-by: Sashiko bot <sashiko-bot@kernel.org>
Assisted-by: Gemini:gemini-3.1-pro
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-07-24 15:55:07 +02:00

..

88pm80x_onkey.c

…

88pm860x_onkey.c

…

ab8500-ponkey.c

…

ad714x-i2c.c

…

ad714x-spi.c

…

ad714x.c

…

ad714x.h

…

adxl34x-i2c.c

…

adxl34x-spi.c

…

adxl34x.c

…

adxl34x.h

…

apanel.c

…

ariel-pwrbutton.c

…

arizona-haptics.c

…

atc260x-onkey.c

…

ati_remote2.c

…

atlas_btns.c

…

atmel_captouch.c

…

axp20x-pek.c

…

bma150.c

…

cm109.c

…

cma3000_d0x_i2c.c

…

cma3000_d0x.c

…

cma3000_d0x.h

…

cobalt_btns.c

…

cpcap-pwrbutton.c

…

da7280.c

…

da9052_onkey.c

…

da9055_onkey.c

…

da9063_onkey.c

…

dm355evm_keys.c

…

drv260x.c

…

drv2665.c

…

drv2667.c

…

e3x0-button.c

…

gpio_decoder.c

…

gpio-beeper.c

…

gpio-vibra.c

…

hisi_powerkey.c

…

hp_sdc_rtc.c

…

ibm-panel.c

…

ideapad_slidebar.c

…

ims-pcu.c

Input: ims-pcu - fix type confusion in CDC union descriptor parsing

2026-07-24 15:55:07 +02:00

iqs269a.c

…

iqs626a.c

…

iqs7222.c

Input: iqs7222 - avoid enabling unused interrupts

2025-09-19 16:29:57 +02:00

Kconfig

…

keyspan_remote.c

…

kxtj9.c

…

m68kspkr.c

…

Makefile

…

max8925_onkey.c

…

max8997_haptic.c

…

max77650-onkey.c

…

max77693-haptic.c

…

mc13783-pwrbutton.c

…

mma8450.c

…

palmas-pwrbutton.c

…

pcap_keys.c

…

pcf8574_keypad.c

…

pcf50633-input.c

…

pcspkr.c

…

pm8xxx-vibrator.c

Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation

2024-06-12 11:03:45 +02:00

pm8941-pwrkey.c

…

pmic8xxx-pwrkey.c

…

powermate.c

…

pwm-beeper.c

…

pwm-vibra.c

…

rave-sp-pwrbutton.c

…

rb532_button.c

…

regulator-haptic.c

…

retu-pwrbutton.c

…

rk805-pwrkey.c

…

rotary_encoder.c

…

rt5120-pwrkey.c

…

sc27xx-vibra.c

…

sgi_btns.c

…

soc_button_array.c

…

sparcspkr.c

Input: sparcspkr - avoid unannotated fall-through

2025-06-27 11:07:37 +01:00

stpmic1_onkey.c

…

tps65218-pwrbutton.c

…

twl4030-pwrbutton.c

…

twl4030-vibra.c

…

twl6040-vibra.c

…

uinput.c

Input: uinput - take event lock when submitting FF request "event"

2026-04-18 10:35:56 +02:00

wistron_btns.c

…

wm831x-on.c

…

xen-kbdfront.c

xen: make remove callback of xen driver void returned

2026-02-06 16:44:18 +01:00

yealink.c

…

yealink.h

…