TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.9.301
twx-linux/drivers
T
History
Greg Kroah-Hartman f5dc193167 moxart: fix potential use-after-free on remove path 
commit bd2db32e7c upstream.

It was reported that the mmc host structure could be accessed after it
was freed in moxart_remove(), so fix this by saving the base register of
the device and using it instead of the pointer dereference.

Cc: Ulf Hansson <ulf.hansson@linaro.org>
Cc: Xiyu Yang <xiyuyang19@fudan.edu.cn>
Cc: Xin Xiong <xiongx18@fudan.edu.cn>
Cc: Xin Tan <tanxin.ctf@gmail.com>
Cc: Tony Lindgren <tony@atomide.com>
Cc: Yang Li <yang.lee@linux.alibaba.com>
Cc: linux-mmc@vger.kernel.org
Cc: stable <stable@vger.kernel.org>
Reported-by: whitehat002 <hackyzh002@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Link: https://lore.kernel.org/r/20220127071638.4057899-1-gregkh@linuxfoundation.org
Signed-off-by: Ulf Hansson <ulf.hansson@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-11 08:41:17 +01:00
..
accessibility
…
acpi
ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
2022-01-27 08:47:38 +01:00
amba
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2021-11-12 13:18:01 +01:00
android
binder: use wake_up_pollfree()
2021-12-14 10:04:48 +01:00
ata
libata: add horkage for ASMedia 1092
2021-12-14 10:04:48 +01:00
atm
atm: nicstar: register the interrupt handler in the right place
2021-07-20 16:21:08 +02:00
auxdisplay
auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
2021-11-26 11:48:38 +01:00
base
regmap: Fix possible double-free in regcache_rbtree_exit()
2021-11-02 17:39:23 +01:00
bcma
bcma: Fix memory leak for internally-handled cores
2021-09-22 11:43:02 +02:00
block
floppy: Add max size check for user space request
2022-01-27 08:47:37 +01:00
bluetooth
Bluetooth: bfusb: fix division by zero in send path
2022-01-27 08:47:30 +01:00
bus
…
cdrom
…
char
char/mwave: Adjust io port register size
2022-01-27 08:47:35 +01:00
clk
clk: kirkwood: Fix a clocking boot regression
2021-09-22 11:43:02 +02:00
clocksource
…
connector
…
cpufreq
cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
2021-10-06 10:23:41 +02:00
cpuidle
cpuidle: Fix kobject memory leaks in error paths
2021-11-26 11:48:33 +01:00
crypto
crypto: qce - fix uaf on qce_ahash_register_one
2022-01-27 08:47:33 +01:00
dax
…
dca
…
devfreq
…
dio
…
dma
dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
2022-01-27 08:47:41 +01:00
dma-buf
…
edac
EDAC/xgene: Fix deferred probing
2022-02-08 18:15:30 +01:00
eisa
…
extcon
extcon: max8997: Add missing modalias string
2021-07-20 16:21:05 +02:00
firewire
…
firmware
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
2021-12-22 09:05:15 +01:00
fmc
…
fpga
…
gpio
gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
2022-01-27 08:47:37 +01:00
gpu
drm/nouveau: fix off by one in BIOS boundary checking
2022-02-08 18:15:29 +01:00
hid
HID: apple: Do not reset quirks when the Fn key is not found
2022-01-27 08:47:36 +01:00
hsi
HSI: core: Fix return freed object in hsi_new_client
2022-01-27 08:47:37 +01:00
hv
hyperv/vmbus: include linux/bitops.h
2021-11-26 11:48:20 +01:00
hwmon
hwmon: (lm90) Reduce maximum conversion rate for G781
2022-02-08 18:15:28 +01:00
hwspinlock
…
hwtracing
…
i2c
i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
2022-01-27 08:47:39 +01:00
ide
…
idle
…
iio
iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
2021-12-14 10:04:50 +01:00
infiniband
RDMA/rxe: Fix a typo in opcode name
2022-01-27 08:47:41 +01:00
input
Input: spaceball - fix parsing of movement data packets
2022-01-05 12:31:25 +01:00
iommu
iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
2022-02-08 18:15:29 +01:00
ipack
ipack: ipoctal: fix module reference leak
2021-10-06 10:23:42 +02:00
irqchip
irqchip: nvic: Fix offset for Interrupt Priority Offsets
2021-12-14 10:04:50 +01:00
isdn
mISDN: change function names to avoid conflicts
2022-01-11 13:38:13 +01:00
leds
leds: ktd2692: Fix an error handling path
2021-07-20 16:21:05 +02:00
lguest
…
lightnvm
…
macintosh
…
mailbox
…
mcb
mcb: fix error handling in mcb_alloc_bus()
2021-10-06 10:23:39 +02:00
md
dm space map common: add bounds check to sm_ll_lookup_bitmap()
2022-01-27 08:47:38 +01:00
media
media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
2022-01-29 10:15:58 +01:00
memory
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
2021-11-26 11:48:37 +01:00
memstick
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2021-11-26 11:48:34 +01:00
message
…
mfd
mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
2022-01-27 08:47:31 +01:00
misc
misc: lattice-ecp3-config: Fix task hung when firmware load failed
2022-01-27 08:47:36 +01:00
mmc
moxart: fix potential use-after-free on remove path
2022-02-11 08:41:17 +01:00
mtd
mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
2021-11-26 11:48:38 +01:00
net
net: macsec: Verify that send_sci is on when setting Tx sci explicitly
2022-02-08 18:15:29 +01:00
nfc
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
2021-11-26 11:48:39 +01:00
ntb
…
nubus
…
nvdimm
…
nvme
nvme-pci: Fix an error handling path in 'nvme_probe()'
2021-09-22 11:42:57 +02:00
nvmem
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2021-10-27 09:33:58 +02:00
of
of: Fix truncation of memory sizes on 32-bit platforms
2021-07-20 16:21:05 +02:00
oprofile
…
parisc
parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
2022-01-27 08:47:41 +01:00
parport
parport: remove non-zero check on count
2021-09-22 11:43:07 +02:00
pci
PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
2022-01-27 08:47:32 +01:00
pcmcia
pcmcia: fix setting of kthread task states
2022-01-27 08:47:35 +01:00
perf
…
phy
phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe()
2021-07-20 16:21:05 +02:00
pinctrl
pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
2021-09-22 11:43:04 +02:00
platform
platform/x86: apple-gmux: use resource_size() with res
2022-01-05 12:31:24 +01:00
pnp
…
power
power: bq25890: Enable continuous conversion for ADC at charging
2022-01-27 08:47:40 +01:00
powercap
…
pps
…
ps3
…
ptp
ptp_pch: Load module automatically if ID matches
2021-10-17 10:05:39 +02:00
pwm
pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered
2021-09-26 13:36:18 +02:00
rapidio
…
ras
…
regulator
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
2021-11-26 11:48:22 +01:00
remoteproc
…
reset
reset: ti-syscon: fix to_ti_syscon_reset_data macro
2021-07-28 09:14:24 +02:00
rpmsg
…
rtc
rtc: cmos: Evaluate century appropriate
2022-02-08 18:15:29 +01:00
s390
scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices
2022-02-08 18:15:26 +01:00
sbus
…
scsi
scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
2022-02-08 18:15:29 +01:00
sfi
…
sh
maple: fix wrong return value of maple_bus_init().
2021-11-26 11:48:41 +01:00
sn
…
soc
soc/tegra: fuse: Fix bitwise vs. logical OR warning
2021-12-22 09:05:14 +01:00
spi
spi: mediatek: Avoid NULL pointer crash in interrupt
2022-02-08 18:15:29 +01:00
spmi
…
ssb
ssb: sdio: Don't overwrite const buffer if block_write fails
2021-07-20 16:20:57 +02:00
staging
ion: Do not 'put' ION handle until after its final use
2022-01-29 10:15:58 +01:00
target
scsi: target: Fix alua_tg_pt_gps_count tracking
2021-11-26 11:48:41 +01:00
tc
…
thermal
thermal: core: Reset previous low and high trip during thermal zone init
2021-12-08 08:45:05 +01:00
thunderbolt
…
tty
tty: Add support for Brainboxes UC cards.
2022-02-08 18:15:26 +01:00
uio
…
usb
USB: core: Fix hang in usb_kill_urb by adding memory barriers
2022-02-08 18:15:27 +01:00
uwb
…
vfio
vfio: Use config not menuconfig for VFIO_NOIOMMU
2021-09-22 11:43:04 +02:00
vhost
vhost/vsock: fix incorrect used length reported to the guest
2021-12-08 08:45:04 +01:00
video
vgacon: Propagate console boot parameters before calling `vc_resize'
2021-12-08 08:45:06 +01:00
virt
…
virtio
virtio_pci: Support surprise removal of virtio pci device
2022-01-11 13:38:11 +01:00
vlynq
…
vme
…
w1
w1: Misuse of get_user()/put_user() reported by sparse
2022-01-27 08:47:39 +01:00
watchdog
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
2021-11-26 11:48:38 +01:00
xen
xen: detect uninitialized xenbus in xenbus_init
2021-12-08 08:45:02 +01:00
zorro
…
Kconfig
…
Makefile
…