Pratyush Brahma
89839b440d
iommu: Fix missing return check of arm_lpae_init_pte ...
UAF scenario may occur in clients with EL1 privileges for
iova mappings when we miss to check the return value of
arm_lpae_init_pte which may lead to an PTE be counted as
it was set even if it was already existing. This can cause a
dangling IOMMU PTE to be left mapped pointing to a
freed object and cause UAF in the client if the dangling PTE
is accessed after a failed unmap operation.
Fixes: 27de1978c331 ("ANDROID: GKI: iommu/io-pgtable-arm: LPAE related updates by vendor")
Change-Id: I674b9b520e705b8f8e63ba20ed76e64cb2fe0f47
Signed-off-by: Pratyush Brahma <quic_pbrahma@quicinc.com>
2024-04-01 20:50:53 +03:00
iommu/amd: Fix backport of 140456f994195b568ecd7fc2287a34eadffef3ca
2021-08-04 11:58:01 +02:00
iommu/amd: Fix ivrs_acpihid cmdline parsing code
2023-01-07 12:07:37 +01:00
iommu/amd: Increase interrupt remapping table limit to 512 entries
2020-11-18 18:26:27 +01:00
iommu/arm-smmu-v3: fix event handling soft lockup
2022-04-20 09:06:42 +02:00
Merge android-4.9.191 ( 9ca8608) into msm-4.9
2019-10-23 13:25:13 +08:00
iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
2022-12-08 11:15:41 +01:00
iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate()
2020-10-14 09:48:13 +02:00
iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
2023-01-07 12:07:28 +01:00
iommu/vt-d: Do not use flush-queue when caching-mode is on
2021-02-10 09:09:27 +01:00
iommu/intel: Fix memleak in intel_irq_remapping_alloc
2021-01-17 13:57:55 +01:00
iommu: Fix missing return check of arm_lpae_init_pte
2024-04-01 20:50:53 +03:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into HEAD
2020-06-30 02:33:58 +03:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
iommu: msm: Update lazy in compliance with upstream dma ops
2020-01-02 15:11:45 +05:30
iommu/msm: Fix an incorrect NULL check on list iterator
2022-06-14 16:52:35 +02:00
iommu/omap: Fix buffer overflow in debugfs
2022-10-26 13:15:44 +02:00
iommu/tegra-smmu: Fix page tables in > 4 GiB memory
2020-01-04 13:40:37 +01:00
89839b440d