Evolution-X-Devices/kernel_samsung_a71
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
13b69e2dfd7ca0a2ae117bc1ee2c2ec00d26022d
kernel_samsung_a71/drivers
History
Dan Carpenter 13b69e2dfd mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() 
[ Upstream commit 26783d74cc6a440ee3ef9836a008a697981013d0 ]

The "req" struct is always added to the "wm831x->auxadc_pending" list,
but it's only removed from the list on the success path.  If a failure
occurs then the "req" struct is freed but it's still on the list,
leading to a use after free.

Fixes: 78bb3688ea ("mfd: Support multiple active WM831x AUXADC conversions")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Charles Keepax <ckeepax@opensource.cirrus.com>
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-03-03 18:22:47 +01:00
..
accessibility
…
acpi
ACPI: thermal: Do not call acpi_thermal_check() directly
2021-02-07 14:47:40 +01:00
amba
amba: Fix resource leak for drivers without .remove
2021-03-03 18:22:46 +01:00
android
binder: fix UAF when releasing todo list
2020-10-29 09:06:59 +01:00
ata
ata: ahci_brcm: Add back regulators management
2021-03-03 18:22:43 +01:00
atm
atm: idt77252: call pci_disable_device() on error path
2021-01-12 20:09:06 +01:00
auxdisplay
auxdisplay: ht16k33: Fix refresh rate handling
2021-03-03 18:22:46 +01:00
base
driver core: Extend device_is_dependent()
2021-02-07 14:47:40 +01:00
bcma
bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
2020-01-27 14:46:45 +01:00
block
xen-blkback: fix error handling in xen_blkbk_map()
2021-02-23 14:00:34 +01:00
bluetooth
Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function
2021-03-03 18:22:37 +01:00
bus
mips: cdmm: fix use-after-free in mips_cdmm_bus_discover
2020-12-29 13:46:56 +01:00
cdrom
…
char
hwrng: timeriomem - Fix cooldown period calculation
2021-03-03 18:22:43 +01:00
clk
clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL
2021-03-03 18:22:44 +01:00
clocksource
clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
2021-03-03 18:22:45 +01:00
connector
…
cpufreq
cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove()
2021-03-03 18:22:38 +01:00
cpuidle
cpuidle: Fixup IRQ state
2020-09-09 19:03:06 +02:00
crypto
crypto: bcm - Rename struct device_private to bcm_device_private
2021-03-03 18:22:42 +01:00
dax
…
dca
…
devfreq
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
2020-10-01 13:12:28 +02:00
dio
…
dma
dmaengine: hsu: disable spurious interrupt
2021-03-03 18:22:45 +01:00
dma-buf
…
edac
EDAC/amd64: Fix PCI component registration
2020-12-29 13:47:06 +01:00
eisa
…
extcon
extcon: max77693: Fix modalias string
2020-12-29 13:47:01 +01:00
firewire
…
firmware
efi: Make it possible to disable efivar_ssdt entirely
2020-07-09 09:36:33 +02:00
fmc
…
fpga
…
fsi
…
gpio
gpio: mvebu: fix pwm .get_state period calculation
2021-01-30 13:31:15 +01:00
gpu
gma500: clean up error handling in init
2021-03-03 18:22:41 +01:00
hid
HID: core: detect and skip invalid inputs to snto32()
2021-03-03 18:22:44 +01:00
hsi
HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
2020-12-29 13:46:56 +01:00
hv
Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
2021-03-03 18:22:43 +01:00
hwmon
hwmon: (applesmc) check status earlier.
2020-09-09 19:03:06 +02:00
hwspinlock
…
hwtracing
stm class: Fix module init return on allocation failure
2021-01-30 13:31:14 +01:00
i2c
i2c: stm32f7: fix configuration of the digital filter
2021-02-23 14:00:33 +01:00
ide
scsi: ide: Do not set the RQF_PREEMPT flag for sense requests
2021-01-12 20:09:05 +01:00
idle
…
iio
iio: ad5504: Fix setting power-down state
2021-01-30 13:31:13 +01:00
infiniband
RDMA/rxe: Fix coding error in rxe_recv.c
2021-03-03 18:22:47 +01:00
input
Input: xpad - sync supported devices with fork on GitHub
2021-02-10 09:12:10 +01:00
iommu
iommu/vt-d: Do not use flush-queue when caching-mode is on
2021-02-10 09:12:10 +01:00
ipack
…
irqchip
irqchip/mips-cpu: Set IPI domain parent chip
2021-01-30 13:31:13 +01:00
isdn
misdn: dsp: select CONFIG_BITREVERSE
2021-01-23 15:48:42 +01:00
leds
leds: trigger: fix potential deadlock with libata
2021-02-03 23:22:21 +01:00
lightnvm
lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
2020-01-27 14:46:32 +01:00
macintosh
drivers/macintosh: Fix memleak in windfarm_pm112 driver
2020-06-20 10:25:19 +02:00
mailbox
mailbox: avoid timer start from callback
2020-10-29 09:07:11 +01:00
mcb
…
md
dm: avoid filesystem lookup in dm_get_dev_t()
2021-01-30 13:31:12 +01:00
media
media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values
2021-03-03 18:22:42 +01:00
memory
memory: emif: Remove bogus debugfs error handling
2020-11-05 11:06:57 +01:00
memstick
memstick: r592: Fix error return in r592_probe()
2020-12-29 13:46:58 +01:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2020-11-05 11:06:59 +01:00
mfd
mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
2021-03-03 18:22:47 +01:00
misc
misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
2021-01-09 13:37:38 +01:00
mmc
mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe
2021-03-03 18:22:46 +01:00
mtd
spi: cadence-quadspi: Abort read if dummy cycles required are too many
2021-03-03 18:22:44 +01:00
mux
…
net
net: mvneta: Remove per-cpu queue mapping for Armada 3700
2021-03-03 18:22:40 +01:00
nfc
nfc: s3fwrn5: Release the nfc firmware
2020-12-29 13:47:02 +01:00
ntb
NTB: hw: amd: fix an issue about leak system resources
2020-10-29 09:07:14 +01:00
nubus
…
nvdimm
libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels
2020-12-29 13:47:11 +01:00
nvme
nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs
2021-02-10 09:12:09 +01:00
nvmem
nvmem: qfprom: remove incorrect write support
2020-06-11 09:23:01 +02:00
of
of/fdt: Make sure no-map does not remove already reserved regions
2021-03-03 18:22:45 +01:00
oprofile
…
parisc
parisc: mask out enable and reserved bits from sba imask
2020-08-21 09:48:16 +02:00
parport
…
pci
PCI: Fix pci_slot_release() NULL pointer dereference
2020-12-29 13:47:11 +01:00
pcmcia
…
perf
drivers/perf: xgene_pmu: Fix uninitialized resource struct
2020-10-29 09:07:00 +01:00
phy
phy: cpcap-usb: Fix warning for missing regulator_disable
2021-02-07 14:47:40 +01:00
pinctrl
pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe()
2020-12-29 13:46:58 +01:00
platform
platform/x86: hp-wmi: Disable tablet-mode reporting by default
2021-02-23 14:00:31 +01:00
pnp
…
power
power: reset: at91-sama5d2_shdwc: fix wkupdbc mask
2021-03-03 18:22:45 +01:00
powercap
powercap: restrict energy meter to root access
2020-11-10 21:10:28 +01:00
pps
…
ps3
powerpc/ps3: use dma_mapping_error()
2020-12-29 13:47:02 +01:00
ptp
…
pwm
pwm: lp3943: Dynamically allocate PWM chip base
2020-12-29 13:47:03 +01:00
rapidio
rapidio: fix the missed put_device() for rio_mport_add_riodev
2020-10-29 09:07:11 +01:00
ras
…
regulator
regulator: axp20x: Fix reference cout leak
2021-03-03 18:22:45 +01:00
remoteproc
remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load
2021-02-23 14:00:29 +01:00
reset
…
rpmsg
rpmsg: glink: smem: Ensure ordering during tx
2020-04-24 08:01:06 +02:00
rtc
rtc: s5m: select REGMAP_I2C
2021-03-03 18:22:45 +01:00
s390
s390/dasd: fix hanging device offline processing
2021-01-09 13:37:37 +01:00
sbus
…
scsi
scsi: qla2xxx: Fix crash during driver load on big endian machines
2021-02-23 14:00:34 +01:00
sfi
…
sh
…
sn
…
soc
drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[]
2021-02-03 23:22:21 +01:00
spi
spi: stm32: properly handle 0 byte transfer
2021-03-03 18:22:47 +01:00
spmi
…
ssb
…
staging
staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules
2021-03-03 18:22:39 +01:00
target
scsi: target: Fix XCOPY NAA identifier lookup
2021-01-12 20:09:14 +01:00
tc
…
tee
tee: optee: Fix compilation issue with nommu
2020-02-05 14:18:24 +00:00
thermal
thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430
2020-09-09 19:03:10 +02:00
thunderbolt
thunderbolt: Add the missed ida_simple_remove() in ring_request_msix()
2020-11-18 18:27:58 +01:00
tty
serial_core: Check for port state when tty is in error state
2020-12-29 13:46:49 +01:00
uio
uio: Fix use-after-free in uio_unregister_device()
2020-11-18 18:27:58 +01:00
usb
usb: dwc2: Make "trimming xfer length" a debug message
2021-03-03 18:22:39 +01:00
uwb
…
vfio
vfio/pci: Move dummy_resources_list init in vfio_pci_probe()
2021-01-09 13:37:37 +01:00
vhost
vhost_net: fix ubuf refcount incorrectly when sendmsg fails
2021-01-12 20:09:08 +01:00
video
fbdev: aty: SPARC64 requires FB_ATY_CT
2021-03-03 18:22:40 +01:00
virt
drivers/virt/fsl_hypervisor: Fix error handling path
2020-10-29 09:07:05 +01:00
virtio
virtio_ring: Avoid loop when vq is broken in virtqueue_poll
2020-08-26 10:29:57 +02:00
vlynq
…
vme
vme: bridges: reduce stack usage
2020-02-28 16:36:04 +01:00
w1
w1: mxc_w1: Fix timeout resolution problem leading to bus error
2020-11-05 11:06:59 +01:00
watchdog
watchdog: coh901327: add COMMON_CLK dependency
2020-12-29 13:47:02 +01:00
xen
xen-scsiback: don't "handle" error by BUG()
2021-02-23 14:00:34 +01:00
zorro
…
Kconfig
…
Makefile
…