linux-st/drivers at d716ea059cd3d6abfbedda164a67b3659e19d2de - linux-st - i2SOMGit

openstlinux/linux-st

Files

History

Tzung-Bi Shih eab28bfafc platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl

[ Upstream commit b20cf3f89c56b5f6a38b7f76a8128bf9f291bbd3 ]

It is possible to peep kernel page's data by providing larger `insize`
in struct cros_ec_command[1] when invoking EC host commands.

Fix it by using zeroed memory.

[1]: https://elixir.bootlin.com/linux/v6.2/source/include/linux/platform_data/cros_ec_proto.h#L74

Fixes: eda2e30c66 ("mfd / platform: cros_ec: Miscellaneous character device to talk with the EC")
Signed-off-by: Tzung-Bi Shih <tzungbi@kernel.org>
Reviewed-by: Guenter Roeck <groeck@chromium.org>
Link: https://lore.kernel.org/r/20230324010658.1082361-1-tzungbi@kernel.org
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-03-30 12:49:12 +02:00

..

…

ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent

2023-03-22 13:34:04 +01:00

…

…

…

atm: idt77252: fix kmemleak when rmmod idt77252

2023-03-30 12:49:09 +02:00

…

drivers: base: dd: fix memory leak with using debugfs_lookup()

2023-03-11 13:55:39 +01:00

…

block: sunvdc: add check for mdesc_grab() returning NULL

2023-03-22 13:33:47 +01:00

Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work

2023-03-30 12:49:12 +02:00

bus: mhi: ep: Change state_lock to mutex

2023-03-17 08:50:19 +01:00

…

tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address

2023-03-17 08:50:30 +01:00

clk: HI655X: select REGMAP instead of depending on it

2023-03-22 13:33:40 +01:00

…

…

…

…

…

cpuidle: psci: Iterate backwards over list in psci_pd_remove()

2023-03-22 13:34:04 +01:00

…

…

…

…

…

…

…

…

…

…

…

…

efi/libstub: smbios: Use length member instead of record struct size

2023-03-30 12:49:04 +02:00

…

…

…

…

drm/amd/display: Set dcn32 caps.seamless_odm

2023-03-30 12:49:11 +02:00

…

HID: uhid: Over-ride the default maximum data buffer value with our own

2023-03-17 08:50:17 +01:00

…

…

…

hwmon: (ltc2992) Set can_sleep flag for GPIO chip

2023-03-22 13:33:52 +01:00

…

…

i2c: hisi: Only use the completion interrupt to finish the transfer

2023-03-30 12:49:03 +02:00

…

…

iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()

2023-03-11 13:55:35 +01:00

RDMA/cma: Distinguish between sockaddr_in and sockaddr_in6 by size

2023-03-11 13:55:40 +01:00

Input: exc3000 - properly stop timer on shutdown

2023-03-17 08:50:19 +01:00

interconnect: qcom: qcm2290: Fix MASTER_SNOC_BIMC_NRT

2023-03-30 12:48:59 +02:00

iommu: Attach device group to old domain in error path

2023-03-11 13:55:40 +01:00

…

…

…

…

macintosh: windfarm: Use unsigned type for 1-bit bitfields

2023-03-17 08:50:31 +01:00

…

…

md: select BLOCK_LEGACY_AUTOLOAD

2023-03-22 13:33:58 +01:00

media: m5mols: fix off-by-one loop termination error

2023-03-22 13:33:53 +01:00

memory: tegra30-emc: fix interconnect registration race

2023-03-22 13:33:56 +01:00

…

…

mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak

2023-03-11 13:55:32 +01:00

misc: vmw_balloon: fix memory leak with using debugfs_lookup()

2023-03-11 13:55:39 +01:00

mmc: sdhci_am654: lower power-on failed message severity

2023-03-22 13:34:03 +01:00

…

…

…

net: mdio: thunder: Add missing fwnode_handle_put()

2023-03-30 12:49:11 +02:00

nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition

2023-03-22 13:33:46 +01:00

…

…

…

nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000

2023-03-22 13:34:02 +01:00

…

…

…

…

…

PCI: s390: Fix use-after-free of PCI resources with per-function hotplug

2023-03-22 13:33:45 +01:00

…

…

…

phy: rockchip-typec: Fix unsigned comparison with less than zero

2023-03-11 13:55:40 +01:00

…

platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl

2023-03-30 12:49:12 +02:00

…

power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition

2023-03-30 12:49:01 +02:00

…

…

…

ptp: vclock: use mutex to fix "sleep on atomic" bug

2023-03-11 13:55:25 +01:00

…

…

…

…

…

…

…

rtc: allow rtc_read_alarm without read_alarm callback

2023-03-11 13:55:30 +01:00

…

…

scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()

2023-03-30 12:49:03 +02:00

…

…

…

soc: mediatek: mtk-svs: keep svs alive if CONFIG_DEBUG_FS not supported

2023-03-22 13:33:53 +01:00

soundwire: cadence: Drain the RX FIFO after an IO timeout

2023-03-11 13:55:40 +01:00

spi: intel: Check number of chip selects after reading the descriptor

2023-03-17 08:50:20 +01:00

…

…

staging: rtl8723bs: Pass correct parameters to cfg80211_get_bss()

2023-03-17 08:50:16 +01:00

…

…

…

thermal: intel: BXT_PMIC: select REGMAP instead of depending on it

2023-03-11 13:55:32 +01:00

…

hvc/xen: prevent concurrent accesses to the shared ring

2023-03-30 12:49:09 +02:00

…

…

usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails

2023-03-11 13:55:44 +01:00

vp_vdpa: fix the crash in hot unplug with vp_vdpa

2023-03-22 13:34:03 +01:00

…

vhost-vdpa: free iommu domain after last use during cleanup

2023-03-22 13:33:44 +01:00

fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release()

2023-03-22 13:34:04 +01:00

virt/coco/sev-guest: Add throttling awareness

2023-03-22 13:34:06 +01:00

…

…

…

watchdog: sbsa_wdog: Make sure the timeout programming is within the limits

2023-03-11 13:55:24 +01:00

…

…

Kconfig

…

Makefile

…