android_kernel_sony_sdm845/drivers
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Dan Carpenter 6dc7b87c62 staging: gdm724x: fix use after free in gdm_lte_rx()
commit fc7f750dc9d102c1ed7bbe4591f991e770c99033 upstream.

The netif_rx_ni() function frees the skb so we can't dereference it to
save the skb->len.

Fixes: 61e1210476 ("staging: gdm7240: adding LTE USB driver")
Cc: stable <stable@vger.kernel.org>
Reported-by: kernel test robot <lkp@intel.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20220228074331.GA13685@kili
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-16 12:49:01 +01:00
..
accessibility
acpi ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() 2022-01-27 08:47:38 +01:00
amba ARM: 9120/1: Revert "amba: make use of -1 IRQs warn" 2021-11-12 13:18:01 +01:00
android binder: use wake_up_pollfree() 2021-12-14 10:04:48 +01:00
ata ata: pata_hpt37x: fix PCI clock detection 2022-03-08 19:00:57 +01:00
atm atm: nicstar: register the interrupt handler in the right place 2021-07-20 16:21:08 +02:00
auxdisplay auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string 2021-11-26 11:48:38 +01:00
base regmap: Fix possible double-free in regcache_rbtree_exit() 2021-11-02 17:39:23 +01:00
bcma bcma: Fix memory leak for internally-handled cores 2021-09-22 11:43:02 +02:00
block xen/blkfront: don't use gnttab_query_foreign_access() for mapped status 2022-03-11 10:03:32 +01:00
bluetooth Bluetooth: bfusb: fix division by zero in send path 2022-01-27 08:47:30 +01:00
bus bus: qcom: Put child node before return 2021-05-22 10:40:23 +02:00
cdrom cdrom: gdrom: initialize global variable at init time 2021-05-26 11:29:07 +02:00
char char/mwave: Adjust io port register size 2022-01-27 08:47:35 +01:00
clk clk: kirkwood: Fix a clocking boot regression 2021-09-22 11:43:02 +02:00
clocksource clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined 2021-03-03 17:44:37 +01:00
connector
cpufreq cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory 2021-10-06 10:23:41 +02:00
cpuidle cpuidle: Fix kobject memory leaks in error paths 2021-11-26 11:48:33 +01:00
crypto crypto: qce - fix uaf on qce_ahash_register_one 2022-01-27 08:47:33 +01:00
dax
dca
devfreq PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out 2020-10-01 20:40:02 +02:00
dio
dma dmaengine: shdma: Fix runtime PM imbalance on error 2022-03-08 19:00:57 +01:00
dma-buf
edac EDAC: Fix calculation of returned address and next offset in edac_align_ptr() 2022-02-23 11:56:41 +01:00
eisa
extcon extcon: max8997: Add missing modalias string 2021-07-20 16:21:05 +02:00
firewire firewire: nosy: Fix a use-after-free bug in nosy_ioctl() 2021-04-07 12:05:40 +02:00
firmware arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() 2022-03-11 10:03:31 +01:00
fmc
fpga
gpio gpio: ts4900: Do not set DAT and OE together 2022-03-16 12:49:01 +01:00
gpu drm/edid: Always set RGB444 2022-03-02 11:32:02 +01:00
hid HID: add mapping for KEY_ALL_APPLICATIONS 2022-03-08 19:00:59 +01:00
hsi HSI: core: Fix return freed object in hsi_new_client 2022-01-27 08:47:37 +01:00
hv hyperv/vmbus: include linux/bitops.h 2021-11-26 11:48:20 +01:00
hwmon hwmon: (dell-smm) Speed up setting of fan speed 2022-02-16 12:43:55 +01:00
hwspinlock
hwtracing intel_th: Consistency and off-by-one fix 2021-05-22 10:40:16 +02:00
i2c i2c: qup: allow COMPILE_TEST 2022-03-08 19:00:57 +01:00
ide block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h> 2020-09-12 11:47:36 +02:00
idle
iio iio: adc: men_z188_adc: Fix a resource leak in an error handling path 2022-03-02 11:32:03 +01:00
infiniband RDMA/ib_srp: Fix a deadlock 2022-03-02 11:32:03 +01:00
input Input: elan_i2c - fix regulator enable count imbalance after suspend/resume 2022-03-08 19:00:59 +01:00
iommu iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() 2022-02-08 18:15:29 +01:00
ipack ipack: ipoctal: fix module reference leak 2021-10-06 10:23:42 +02:00
irqchip irqchip: nvic: Fix offset for Interrupt Priority Offsets 2021-12-14 10:04:50 +01:00
isdn mISDN: change function names to avoid conflicts 2022-01-11 13:38:13 +01:00
leds leds: ktd2692: Fix an error handling path 2021-07-20 16:21:05 +02:00
lguest
lightnvm
macintosh drivers/macintosh: Fix memleak in windfarm_pm112 driver 2020-06-20 10:24:21 +02:00
mailbox
mcb mcb: fix error handling in mcb_alloc_bus() 2021-10-06 10:23:39 +02:00
md dm space map common: add bounds check to sm_ll_lookup_bitmap() 2022-01-27 08:47:38 +01:00
media media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() 2022-01-29 10:15:58 +01:00
memory memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe 2021-11-26 11:48:37 +01:00
memstick memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() 2021-11-26 11:48:34 +01:00
message scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() 2020-11-10 10:23:57 +01:00
mfd mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() 2022-01-27 08:47:31 +01:00
misc misc: lattice-ecp3-config: Fix task hung when firmware load failed 2022-01-27 08:47:36 +01:00
mmc moxart: fix potential use-after-free on remove path 2022-02-11 08:41:17 +01:00
mtd mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status 2022-03-02 11:31:59 +01:00
net Revert "xen-netback: Check for hotplug-status existence before watching" 2022-03-16 12:49:01 +01:00
nfc NFC: port100: fix use-after-free in port100_send_complete 2022-03-16 12:49:00 +01:00
ntb NTB: hw: amd: fix an issue about leak system resources 2020-10-29 09:05:41 +01:00
nubus
nvdimm libnvdimm/dimm: Avoid race between probe and available_slots_show() 2021-03-03 17:44:44 +01:00
nvme nvme-pci: Fix an error handling path in 'nvme_probe()' 2021-09-22 11:42:57 +02:00
nvmem nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells 2021-10-27 09:33:58 +02:00
of of: Fix truncation of memory sizes on 32-bit platforms 2021-07-20 16:21:05 +02:00
oprofile
parisc parisc: Fix sglist access in ccio-dma.c 2022-02-23 11:56:39 +01:00
parport parport: remove non-zero check on count 2021-09-22 11:43:07 +02:00
pci PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller 2022-01-27 08:47:32 +01:00
pcmcia pcmcia: fix setting of kthread task states 2022-01-27 08:47:35 +01:00
perf
phy phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() 2021-07-20 16:21:05 +02:00
pinctrl pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() 2021-09-22 11:43:04 +02:00
platform platform/x86: apple-gmux: use resource_size() with res 2022-01-05 12:31:24 +01:00
pnp
power power: bq25890: Enable continuous conversion for ADC at charging 2022-01-27 08:47:40 +01:00
powercap powercap: restrict energy meter to root access 2020-11-10 21:04:57 +01:00
pps
ps3 powerpc/ps3: use dma_mapping_error() 2020-12-29 13:45:00 +01:00
ptp ptp_pch: Load module automatically if ID matches 2021-10-17 10:05:39 +02:00
pwm pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered 2021-09-26 13:36:18 +02:00
rapidio rapidio: handle create_workqueue() failure 2021-05-26 11:29:06 +02:00
ras
regulator regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled 2021-11-26 11:48:22 +01:00
remoteproc remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load 2021-02-23 13:59:14 +01:00
reset reset: ti-syscon: fix to_ti_syscon_reset_data macro 2021-07-28 09:14:24 +02:00
rpmsg
rtc rtc: cmos: Evaluate century appropriate 2022-02-08 18:15:29 +01:00
s390 scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices 2022-02-08 18:15:26 +01:00
sbus
scsi xen/scsifront: don't use gnttab_query_foreign_access() for mapped status 2022-03-11 10:03:32 +01:00
sfi
sh maple: fix wrong return value of maple_bus_init(). 2021-11-26 11:48:41 +01:00
sn
soc soc: fsl: qe: Check of ioremap return value 2022-03-08 19:00:58 +01:00
spi spi: mediatek: Avoid NULL pointer crash in interrupt 2022-02-08 18:15:29 +01:00
spmi
ssb ssb: sdio: Don't overwrite const buffer if block_write fails 2021-07-20 16:20:57 +02:00
staging staging: gdm724x: fix use after free in gdm_lte_rx() 2022-03-16 12:49:01 +01:00
target scsi: target: iscsi: Make sure the np under each tpg is unique 2022-02-16 12:43:53 +01:00
tc
thermal thermal: core: Reset previous low and high trip during thermal zone init 2021-12-08 08:45:05 +01:00
thunderbolt
tty tty: n_gsm: fix proper link termination after failed open 2022-03-02 11:32:06 +01:00
uio uio_pdrv_genirq: fix use without device tree and no interrupt 2020-07-22 09:10:53 +02:00
usb usb: gadget: clear related members when goto fail 2022-03-08 19:00:57 +01:00
uwb
vfio vfio: Use config not menuconfig for VFIO_NOIOMMU 2021-09-22 11:43:04 +02:00
vhost vhost/vsock: don't check owner in vhost_vsock_stop() while releasing 2022-03-02 11:32:00 +01:00
video vgacon: Propagate console boot parameters before calling `vc_resize' 2021-12-08 08:45:06 +01:00
virt drivers/virt/fsl_hypervisor: Fix error handling path 2020-10-29 09:05:35 +01:00
virtio virtio_pci: Support surprise removal of virtio pci device 2022-01-11 13:38:11 +01:00
vlynq
vme
w1 w1: Misuse of get_user()/put_user() reported by sparse 2022-01-27 08:47:39 +01:00
watchdog watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT 2021-11-26 11:48:38 +01:00
xen xen/gnttab: fix gnttab_end_foreign_access() without page specified 2022-03-11 10:03:33 +01:00
zorro
Kconfig
Makefile