TechPanelGM/kernel_xiaomi_sm8250
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
8b3639cb78a1a45eeb85df92aba93cc459b6175b
kernel_xiaomi_sm8250/drivers
History
Dan Carpenter 2f236d8638 Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() 
[ Upstream commit eb988e46da2e4eae89f5337e047ce372fe33d5b1 ]

The put_device() calls rmi_release_function() which frees "fn" so the
dereference on the next line "fn->num_of_irqs" is a use after free.
Move the put_device() to the end to fix this.

Fixes: 24d28e4f12 ("Input: synaptics-rmi4 - convert irq distribution to irq_domain")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/706efd36-7561-42f3-adfa-dd1d0bd4f5a1@moroto.mountain
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-11-20 10:29:21 +01:00
..
accessibility
…
acpi
ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
2023-11-20 10:29:17 +01:00
amba
amba: bus: fix refcount leak
2023-09-23 10:48:09 +02:00
android
binder: fix memory leak in binder_init()
2023-08-16 18:13:00 +02:00
ata
ata: ahci: fix enum constants for gcc-13
2023-11-08 11:22:21 +01:00
atm
treewide: Remove uninitialized_var() usage
2023-08-11 11:45:01 +02:00
auxdisplay
…
base
regmap: debugfs: Fix a erroneous check after snprintf()
2023-11-20 10:29:17 +01:00
bcma
…
block
remove the sx8 block driver
2023-11-08 11:22:21 +01:00
bluetooth
Bluetooth: vhci: Fix race when opening vhci device
2023-10-25 11:16:40 +02:00
bus
bus: imx-weim: fix branch condition evaluates to a garbage value
2023-04-05 11:15:38 +02:00
cdrom
…
char
hwrng: geode - fix accessing registers
2023-11-20 10:29:18 +01:00
clk
clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped
2023-11-20 10:29:18 +01:00
clocksource
clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
2023-08-11 11:45:02 +02:00
connector
…
cpufreq
cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
2023-09-23 10:48:11 +02:00
cpuidle
sched,idle,rcu: Push rcu_idle deeper into the idle path
2023-10-25 11:16:26 +02:00
crypto
chtls: fix tp->rcv_tstamp initialization
2023-11-20 10:29:17 +01:00
dax
…
dca
…
devfreq
PM / devfreq: Fix leak in devfreq_dev_release()
2023-09-23 10:48:10 +02:00
dio
…
dma
dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()
2023-11-20 10:29:20 +01:00
dma-buf
dma-buf/sw_sync: Avoid recursive lock during fence signal
2023-08-30 16:31:56 +02:00
edac
EDAC/skx: Fix overflows on the DRAM row address mapping arrays
2023-05-17 11:13:09 +02:00
eisa
…
extcon
extcon: Fix kernel doc of property capability fields to avoid warnings
2023-08-11 11:45:12 +02:00
firewire
treewide: Remove uninitialized_var() usage
2023-08-11 11:45:01 +02:00
firmware
firmware: ti_sci: Mark driver as non removable
2023-11-20 10:29:18 +01:00
fmc
…
fpga
fpga: bridge: fix kernel-doc parameter description
2023-05-17 11:13:15 +02:00
fsi
fsi: master-ast-cf: Add MODULE_FIRMWARE macro
2023-09-23 10:47:57 +02:00
gnss
…
gpio
gpio: vf610: set value before the direction to avoid a glitch
2023-10-25 11:17:02 +02:00
gpu
drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe()
2023-11-20 10:29:18 +01:00
hid
hid: cp2112: Fix duplicate workqueue initialization
2023-11-20 10:29:19 +01:00
hsi
…
hv
Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
2023-06-28 10:15:28 +02:00
hwmon
hwmon: (coretemp) Fix potentially truncated sysfs attribute name
2023-11-20 10:29:18 +01:00
hwspinlock
…
hwtracing
coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
2023-05-30 12:42:15 +01:00
i2c
i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
2023-11-08 11:22:16 +01:00
ide
treewide: Remove uninitialized_var() usage
2023-08-11 11:45:01 +02:00
idle
…
iio
iio: exynos-adc: request second interupt only when touchscreen mode is used
2023-11-08 11:22:17 +01:00
infiniband
RDMA/hfi1: Workaround truncation compilation error
2023-11-20 10:29:19 +01:00
input
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
2023-11-20 10:29:21 +01:00
iommu
…
ipack
…
irqchip
irqchip/stm32-exti: add missing DT IRQ flag translation
2023-11-08 11:22:19 +01:00
isdn
mISDN: Update parameter type of dsp_cmx_send()
2023-08-16 18:13:00 +02:00
leds
leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu'
2023-11-20 10:29:19 +01:00
lightnvm
…
macintosh
macintosh: via-pmu-led: requires ATA to be set
2023-05-17 11:13:18 +02:00
mailbox
mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
2023-08-11 11:45:13 +02:00
mcb
mcb-lpc: Reallocate memory region to avoid memory overlapping
2023-11-08 11:22:15 +01:00
md
md/raid1: fix error: ISO C90 forbids mixed declarations
2023-09-23 10:48:17 +02:00
media
media: dvb-usb-v2: af9035: fix missing unlock
2023-11-20 10:29:20 +01:00
memory
…
memstick
memstick r592: make memstick_debug_get_tpc_name() static
2023-08-11 11:45:06 +02:00
message
scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
2023-05-30 12:42:09 +01:00
mfd
mfd: dln2: Fix double put in dln2_probe
2023-11-20 10:29:19 +01:00
misc
misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()
2023-11-20 10:29:20 +01:00
mmc
mmc: core: sdio: hold retuning if sdio in 1-bit mode
2023-11-08 11:22:14 +01:00
mtd
mtd: spinand: micron: correct bitmask for ecc status
2023-10-25 11:17:00 +02:00
mux
…
net
ipvlan: properly track tx_errors
2023-11-20 10:29:17 +01:00
nfc
nfcsim.c: Fix error checking for debugfs_create_dir
2023-06-28 10:15:31 +02:00
ntb
ntb: Fix calculation ntb_transport_tx_free_entry()
2023-09-23 10:48:10 +02:00
nubus
…
nvdimm
nd_btt: Make BTT lanes preemptible
2023-11-20 10:29:18 +01:00
nvme
nvme-pci: do not set the NUMA node of device if it has none
2023-10-10 21:44:59 +02:00
nvmem
nvmem: imx: correct nregs for i.MX6UL
2023-11-08 11:22:16 +01:00
of
of: unittest: Fix overlay type in apply/revert check
2023-09-23 10:48:04 +02:00
opp
…
oprofile
…
parisc
parisc: iosapic.c: Fix sparse warnings
2023-10-10 21:44:58 +02:00
parport
…
pci
PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device
2023-11-08 11:22:21 +01:00
pcmcia
pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
2023-11-20 10:29:20 +01:00
perf
…
phy
phy: mapphone-mdm6600: Fix runtime PM for remove
2023-10-25 11:17:02 +02:00
pinctrl
Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
2023-10-25 11:17:01 +02:00
platform
platform/x86: wmi: Fix opening of char device
2023-11-20 10:29:18 +01:00
pnp
…
power
power: supply: Fix logic checking if system is running from battery
2023-06-21 15:39:56 +02:00
powercap
powercap: fix possible name leak in powercap_register_zone()
2023-03-11 16:31:36 +01:00
pps
…
ps3
…
ptp
…
pwm
pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
2023-11-20 10:29:20 +01:00
rapidio
…
ras
…
regulator
regulator: Fix error checking for debugfs_create_dir
2023-06-21 15:39:56 +02:00
remoteproc
…
reset
…
rpmsg
rpmsg: Fix possible refcount leak in rpmsg_register_device_override()
2023-11-08 11:22:19 +01:00
rtc
rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
2023-09-23 10:47:56 +02:00
s390
scsi: zfcp: Fix a double put in zfcp_port_enqueue()
2023-10-10 21:45:00 +02:00
sbus
…
scsi
scsi: mpt3sas: Fix in error path
2023-11-08 11:22:20 +01:00
sfi
…
sh
…
siox
…
slimbus
…
sn
…
soc
soc: qcom: qmi_encdec: Restrict string length in decode
2023-09-23 10:48:12 +02:00
soundwire
…
spi
spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe()
2023-09-23 10:48:00 +02:00
spmi
spmi: Add a check for remove callback when removing a SPMI driver
2023-05-17 11:13:17 +02:00
ssb
treewide: Remove uninitialized_var() usage
2023-08-11 11:45:01 +02:00
staging
erofs: ensure that the post-EOF tails are all zeroed
2023-09-23 10:47:56 +02:00
target
scsi: target: core: Fix deadlock due to recursive locking
2023-10-10 21:45:01 +02:00
tc
…
tee
…
thermal
thermal: core: prevent potential string overflow
2023-11-20 10:29:17 +01:00
thunderbolt
thunderbolt: Use const qualifier for ring_interrupt_index
2023-04-05 11:15:35 +02:00
tty
tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
2023-11-20 10:29:19 +01:00
uio
…
usb
USB: usbip: fix stub_dev hub disconnect
2023-11-20 10:29:20 +01:00
uwb
…
vfio
…
vhost
treewide: Remove uninitialized_var() usage
2023-08-11 11:45:01 +02:00
video
fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()
2023-11-08 11:22:20 +01:00
virt
…
virtio
virtio-mmio: fix memory leak of vm_dev
2023-11-08 11:22:15 +01:00
visorbus
…
vlynq
…
vme
…
w1
w1: fix loop in w1_fini()
2023-08-11 11:45:11 +02:00
watchdog
watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running
2023-10-10 21:44:59 +02:00
xen
xen/events: replace evtchn_rwlock with RCU
2023-10-10 21:45:02 +02:00
zorro
…
Kconfig
…
Makefile
…