averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-25 16:19:48 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
fe465003bb63df8d5ea15fc17ff6aa9a5fe7daeb
linux-stable-mirror/drivers
T
History
Mathias NymanandGreg Kroah-Hartman fe465003bb xhci: fix possible null pointer dereference at secondary interrupter removal 
commit a54a594d72 upstream.

Don't try to remove a secondary interrupter that is known to be invalid.
Also check if the interrupter is valid inside the spinlock that protects
the array of interrupters.

Found by smatch static checker

Reported-by: Dan Carpenter <dan.carpenter@linaro.org>
Closes: https://lore.kernel.org/linux-usb/ffaa0a1b-5984-4a1f-bfd3-9184630a97b9@moroto.mountain/
Fixes: c99b38c412 ("xhci: add support to allocate several interrupters")
Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>
Link: https://lore.kernel.org/r/20240125152737.2983959-2-mathias.nyman@linux.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-05-09 09:44:08 +02:00
..
accel
…
accessibility
…
acpi
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
2025-05-02 07:50:58 +02:00
amba
…
android
…
ata
ata: libata-scsi: Fix ata_msense_control_ata_feature()
2025-05-02 07:50:48 +02:00
atm
…
auxdisplay
auxdisplay: hd44780: Fix an API misuse in hd44780.c
2025-05-02 07:50:38 +02:00
base
drivers: base: handle module_kobject creation
2025-05-09 09:44:07 +02:00
bcma
…
block
loop: aio inherit the ioprio of original request
2025-05-02 07:51:01 +02:00
bluetooth
Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
2025-05-09 09:43:57 +02:00
bus
bus: mhi: host: Fix race between unprepare and queue_buf
2025-04-25 10:45:26 +02:00
cache
…
cdrom
…
cdx
…
char
char: misc: register chrdev region with all possible minors
2025-05-02 07:50:49 +02:00
clk
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
2025-05-02 07:50:53 +02:00
clocksource
clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
2025-04-25 10:45:25 +02:00
comedi
comedi: jr3_pci: Fix synchronous deletion of timer
2025-05-02 07:51:03 +02:00
connector
…
counter
…
cpufreq
cpufreq: Fix setting policy limits when frequency tables are used
2025-05-09 09:43:53 +02:00
cpuidle
…
crypto
crypto: ccp - Add support for PCI device 0x1134
2025-05-02 07:50:52 +02:00
cxl
cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
2025-05-02 07:50:47 +02:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: dmatest: Fix dmatest waiting less when interrupted
2025-05-02 07:50:55 +02:00
dma-buf
udmabuf: fix a buf size overflow issue during udmabuf creation
2025-05-02 07:50:57 +02:00
edac
EDAC/altera: Set DDR and SDMMC interrupt mask before registration
2025-05-09 09:43:50 +02:00
eisa
…
extcon
…
firewire
…
firmware
firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
2025-05-09 09:44:04 +02:00
fpga
…
fsi
…
gnss
…
gpio
gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
2025-05-02 07:50:59 +02:00
gpu
drm/amd/display: Fix slab-use-after-free in hdcp
2025-05-09 09:44:07 +02:00
greybus
…
hid
HID: pidff: Fix null pointer dereference in pidff_find_fields
2025-04-25 10:45:12 +02:00
hsi
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
2025-04-25 10:45:38 +02:00
hte
…
hv
…
hwmon
hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
2025-04-10 14:37:38 +02:00
hwspinlock
…
hwtracing
…
i2c
i2c: imx-lpi2c: Fix clock count when probe defers
2025-05-09 09:43:50 +02:00
i3c
i3c: Add NULL pointer check in i3c_master_queue_ibi()
2025-04-25 10:45:28 +02:00
idle
…
iio
iio: adc: ad7768-1: Fix conversion result sign
2025-05-02 07:50:39 +02:00
infiniband
qibfs: fix _another_ leak
2025-05-02 07:50:56 +02:00
input
…
interconnect
…
iommu
iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
2025-05-09 09:44:07 +02:00
ipack
…
irqchip
irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
2025-05-09 09:43:51 +02:00
isdn
…
leds
leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
2025-04-25 10:45:28 +02:00
macintosh
…
mailbox
mailbox: pcc: Always clear the platform ack interrupt first
2025-05-02 07:50:54 +02:00
mcb
mcb: fix a double free bug in chameleon_parse_gdd()
2025-05-02 07:50:47 +02:00
md
dm: always update the array size in realloc_argv on success
2025-05-09 09:43:52 +02:00
media
media: vimc: skip .s_stream() for stopped entities
2025-05-02 07:50:37 +02:00
memory
memory: omap-gpmc: drop no compatible check
2025-04-10 14:37:38 +02:00
memstick
…
message
…
mfd
mfd: ene-kb3930: Fix a potential NULL pointer dereference
2025-04-25 10:45:28 +02:00
misc
objtool, lkdtm: Obfuscate the do_nothing() pointer
2025-05-02 07:50:56 +02:00
mmc
mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
2025-05-09 09:43:51 +02:00
most
…
mtd
mtd: rawnand: Add status chack in r852_ready()
2025-04-25 10:45:29 +02:00
mux
…
net
net: vertexcom: mse102x: Fix RX error handling
2025-05-09 09:44:03 +02:00
nfc
…
ntb
ntb_hw_amd: Add NTB PCI ID for new gen CPU
2025-05-02 07:50:56 +02:00
nubus
…
nvdimm
…
nvme
nvme-tcp: fix premature queue removal and I/O failover
2025-05-09 09:44:01 +02:00
nvmem
…
of
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
2025-05-02 07:50:41 +02:00
opp
…
parisc
…
parport
…
pci
PCI: imx6: Skip controller_id generation logic for i.MX7D
2025-05-09 09:43:55 +02:00
pcmcia
…
peci
…
perf
perf: arm_pmu: Don't disable counter in armpmu_add()
2025-04-25 10:45:10 +02:00
phy
phy: freescale: imx8m-pcie: assert phy reset and perst in power off
2025-04-25 10:45:36 +02:00
pinctrl
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
2025-05-02 07:50:52 +02:00
platform
platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug
2025-05-09 09:43:53 +02:00
pmdomain
…
pnp
…
power
…
powercap
…
pps
…
ps3
…
ptp
ptp: ocp: fix start time alignment in ptp_ocp_signal_set
2025-04-25 10:45:44 +02:00
pwm
pwm: fsl-ftm: Handle clk_get_rate() returning 0
2025-04-25 10:45:21 +02:00
rapidio
…
ras
…
regulator
objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc()
2025-05-02 07:50:56 +02:00
remoteproc
…
reset
…
rpmsg
…
rtc
rtc: pcf85063: do a SW reset if POR failed
2025-05-02 07:50:57 +02:00
s390
s390/tty: Fix a potential memory leak bug
2025-05-02 07:50:53 +02:00
sbus
…
scsi
scsi: pm80xx: Set phy_attached to zero when device is gone
2025-05-02 07:51:01 +02:00
sh
…
siox
…
slimbus
…
soc
soc: qcom: ice: introduce devm_of_qcom_ice_get
2025-05-02 07:50:37 +02:00
soundwire
…
spi
spi: tegra114: Don't fail set_cs_timing when delays are zero
2025-05-09 09:43:51 +02:00
spmi
…
ssb
…
staging
…
target
scsi: target: spc: Fix RSOC parameter data header size
2025-04-25 10:45:14 +02:00
tc
…
tee
…
thermal
thermal/drivers/rockchip: Add missing rk3328 mapping entry
2025-04-25 10:45:32 +02:00
thunderbolt
thunderbolt: Scan retimers after device router has been enumerated
2025-05-02 07:50:55 +02:00
tty
serial: sifive: lock port in startup()/shutdown() callbacks
2025-05-02 07:50:49 +02:00
ufs
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
2025-05-02 07:51:01 +02:00
uio
…
usb
xhci: fix possible null pointer dereference at secondary interrupter removal
2025-05-09 09:44:08 +02:00
vdpa
vdpa/mlx5: Fix oversized null mkey longer than 32bit
2025-04-25 10:45:27 +02:00
vfio
…
vhost
…
video
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
2025-04-25 10:45:30 +02:00
virt
…
virtio
…
vlynq
…
w1
…
watchdog
…
xen
xen: Change xen-acpi-processor dom0 dependency
2025-05-02 07:50:58 +02:00
zorro
…
Kconfig
…
Makefile
…