raspi/linux
1
0
Fork 1
mirror of https://github.com/raspberrypi/linux.git synced 2025-12-27 12:32:50 +00:00
Code Issues Projects Releases Wiki Activity
Files
383b56e6ffd3353fd191ef2afe71584ae2df80ff
linux/drivers
History
Benjamin Tissoires 19d1314d46 HID: core: do not bypass hid_hw_raw_request 
commit c2ca42f190 upstream.

hid_hw_raw_request() is actually useful to ensure the provided buffer
and length are valid. Directly calling in the low level transport driver
function bypassed those checks and allowed invalid paramto be used.

Reported-by: Alan Stern <stern@rowland.harvard.edu>
Closes: https://lore.kernel.org/linux-input/c75433e0-9b47-4072-bbe8-b1d14ea97b13@rowland.harvard.edu/
Cc: stable@vger.kernel.org
Link: https://patch.msgid.link/20250710-report-size-null-v2-3-ccf922b7c4e5@kernel.org
Signed-off-by: Benjamin Tissoires <bentiss@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-07-24 08:58:24 +02:00
..
accel
accel/ivpu: Fix warning in ivpu_gem_bo_free()
2025-06-27 11:13:10 +01:00
accessibility
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
acpi
Revert "ACPI: battery: negate current when discharging"
2025-07-17 18:43:50 +02:00
amba
iommu: Get DT/ACPI parsing into the proper probe path
2025-03-11 14:05:43 +01:00
android
binder: fix yet another UAF in binder_devices
2025-06-10 07:17:10 -04:00
ata
ata: pata_cs5536: fix build on 32-bit UML
2025-07-10 16:08:47 +02:00
atm
atm: idt77252: Add missing dma_map_error()
2025-07-17 18:44:01 +02:00
auxdisplay
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
base
x86/bugs: Add a Transient Scheduler Attacks mitigation
2025-07-10 16:08:54 +02:00
bcma
…
block
ublk: sanity check add_dev input for underflow
2025-07-17 18:44:01 +02:00
bluetooth
driver: bluetooth: hci_qca:fix unable to load the BT driver
2025-07-17 18:44:02 +02:00
bus
bus: mhi: host: pci_generic: Add Telit FN920C04 modem support
2025-07-06 11:04:06 +02:00
cache
…
cdrom
…
cdx
Merge branches 'apple/dart', 'arm/smmu/updates', 'arm/smmu/bindings', 'rockchip', 's390', 'core', 'intel/vt-d' and 'amd/amd-vi' into next
2025-03-20 09:11:09 +01:00
char
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
2025-07-17 18:43:43 +02:00
clk
clk: scmi: Handle case where child clocks are initialized before their parents
2025-07-17 18:43:53 +02:00
clocksource
clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
2025-05-05 15:34:49 +02:00
comedi
comedi: jr3_pci: Fix synchronous deletion of timer
2025-04-15 15:18:55 +02:00
connector
…
counter
counter: interrupt-cnt: Protect enable/disable OPs with mutex
2025-06-19 15:40:31 +02:00
cpufreq
cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
2025-06-27 11:13:21 +01:00
cpuidle
Merge tag 'pmdomain-v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm
2025-03-25 20:40:51 -07:00
crypto
crypto: qat - add shutdown handler to qat_dh895xcc
2025-06-27 11:12:55 +01:00
cxl
cxl/ras: Fix CPER handler device confusion
2025-07-06 11:04:14 +02:00
dax
device/dax: properly refcount device dax pages when mapping
2025-03-17 22:06:41 -07:00
dca
…
devfreq
…
dio
…
dma
dmaengine: xilinx_dma: Set dma_device directions
2025-07-06 11:04:05 +02:00
dma-buf
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
2025-07-10 16:08:52 +02:00
dpll
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-03-20 21:38:01 +01:00
edac
EDAC: Initialize EDAC features sysfs attributes
2025-07-17 18:43:38 +02:00
eisa
…
extcon
…
firewire
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
firmware
firmware: exynos-acpm: fix timeouts on xfers handling
2025-07-10 16:08:28 +02:00
fpga
fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
2025-06-19 15:40:31 +02:00
fsi
…
fwctl
fwctl: Fix repeated device word in log message
2025-04-11 20:47:45 -03:00
gnss
…
gpio
gpiolib: fix performance regression when using gpio_chip_get_multiple()
2025-07-17 18:43:46 +02:00
gpu
drm/xe/pm: Correct comment of xe_pm_set_vram_threshold()
2025-07-17 18:43:59 +02:00
greybus
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
hid
HID: core: do not bypass hid_hw_raw_request
2025-07-24 08:58:24 +02:00
hsi
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
hte
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
hv
Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary
2025-06-27 11:13:08 +01:00
hwmon
hwmon: (pmbus/max34440) Fix support for max34451
2025-07-06 11:04:04 +02:00
hwspinlock
hwspinlock: Remove unused hwspin_lock_get_id()
2025-03-21 17:12:04 -05:00
hwtracing
coresight: Only check bottom two claim bits
2025-07-06 11:04:07 +02:00
i2c
i2c: omap: Fix an error handling path in omap_i2c_probe()
2025-07-24 08:58:22 +02:00
i3c
i3c: mipi-i3c-hci: Fix handling status of i3c_hci_irq_handler()
2025-06-27 11:13:30 +01:00
idle
Merge tag 'pm-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2025-03-25 15:00:18 -07:00
iio
iio: hid-sensor-prox: Add support for 16-bit report size
2025-07-06 11:04:07 +02:00
infiniband
RDMA/mlx5: Fix vport loopback for MPV device
2025-07-10 16:08:34 +02:00
input
Input: xpad - set correct controller type for Acer NGR200
2025-07-24 08:58:23 +02:00
interconnect
…
iommu
iommu/vt-d: Assign devtlb cache tag on ATS enablement
2025-07-10 16:08:53 +02:00
ipack
…
irqchip
irqchip/irq-msi-lib: Select CONFIG_GENERIC_MSI_IRQ
2025-07-17 18:43:38 +02:00
isdn
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
leds
leds: multicolor: Fix intensity setting while SW blinking
2025-07-06 11:04:04 +02:00
macintosh
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
mailbox
mailbox: Not protect module_put with spin_lock_irqsave
2025-07-06 11:04:03 +02:00
mcb
mcb: fix a double free bug in chameleon_parse_gdd()
2025-04-15 18:21:39 +02:00
md
dm-bufio: fix sched in atomic context
2025-07-24 08:58:24 +02:00
media
media: uvcvideo: Rollback non processed entities on error
2025-07-06 11:04:10 +02:00
memory
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
memstick
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
message
Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
2025-03-26 19:57:34 -07:00
mfd
mfd: sprd-sc27xx: Fix wakeup source leaks on device unbind
2025-07-06 11:04:03 +02:00
misc
misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
2025-07-06 11:04:07 +02:00
mmc
mtk-sd: reset host->mrq on prepare_data() error
2025-07-10 16:08:27 +02:00
most
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
mtd
mtd: spinand: fix memory leak of ECC engine conf
2025-07-10 16:08:49 +02:00
mux
…
net
net: wangxun: revert the adjustment of the IRQ vector sequence
2025-07-17 18:44:04 +02:00
nfc
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
ntb
Merge tag 'ntb-6.15' of https://github.com/jonmason/ntb
2025-04-04 14:23:07 -07:00
nubus
…
nvdimm
Merge tag 'libnvdimm-for-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm
2025-04-02 20:27:18 -07:00
nvme
nvme-multipath: fix suspicious RCU usage warning
2025-07-10 16:08:42 +02:00
nvmem
nvmem: layouts: u-boot-env: remove crc32 endianness conversion
2025-07-24 08:58:23 +02:00
of
of: unittest: Unlock on error in unittest_data_add()
2025-06-19 15:39:52 +02:00
opp
…
parisc
parisc: led: Use scnprintf() to avoid string truncation warning
2025-03-09 22:27:54 +01:00
parport
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
pci
Revert "PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root()"
2025-07-17 18:43:50 +02:00
pcmcia
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
peci
…
perf
perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()
2025-06-19 15:39:35 +02:00
phy
phy: tegra: xusb: Disable periodic tracking on Tegra234
2025-07-24 08:58:21 +02:00
pinctrl
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
2025-07-17 18:43:47 +02:00
platform
platform/x86: think-lmi: Fix sysfs group cleanup
2025-07-10 16:08:54 +02:00
pmdomain
pmdomain: core: Reset genpd->states to avoid freeing invalid data
2025-06-27 11:13:12 +01:00
pnp
Merge tag 'staging-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
2025-04-02 18:09:17 -07:00
power
power: supply: max17040: adjust thermal channel scaling
2025-06-27 11:13:13 +01:00
powercap
powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
2025-07-10 16:08:53 +02:00
pps
pps: generators: tio: fix platform_set_drvdata()
2025-04-15 18:22:32 +02:00
ps3
…
ptp
ptp: allow reading of currently dialed frequency to succeed on free-running clocks
2025-06-27 11:13:38 +01:00
pwm
pwm: mediatek: Ensure to disable clocks in error path
2025-07-17 18:43:47 +02:00
rapidio
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
2025-06-27 11:13:31 +01:00
ras
RAS/AMD/FMPM: Get masked address
2025-04-08 19:30:58 +02:00
regulator
regulator: fan53555: add enable_time support and soft-start times
2025-07-10 16:08:48 +02:00
remoteproc
remoteproc: k3-m4: Don't assert reset in detach routine
2025-06-27 11:13:08 +01:00
reset
Merge tag 'rproc-v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/remoteproc/linux
2025-03-29 17:18:50 -07:00
rpmsg
rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
2025-06-19 15:40:20 +02:00
rtc
rtc: cmos: use spin_lock_irqsave in cmos_interrupt
2025-07-10 16:08:19 +02:00
s390
s390/pkey: Prevent overflow in size calculation for memdup_user()
2025-07-06 11:04:12 +02:00
sbus
…
scsi
scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask is set
2025-07-10 16:08:31 +02:00
sh
sh: remove duplicate ioread/iowrite helpers
2025-03-11 10:41:18 +01:00
siox
…
slimbus
…
soc
soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events
2025-06-27 11:13:05 +01:00
soundwire
soundwire: only compute port params in specific stream states
2025-06-19 15:40:28 +02:00
spi
spi: Add check for 8-bit transfer with 8 IO mode support
2025-07-24 08:58:23 +02:00
spmi
…
ssb
…
staging
Revert "staging: vchiq_arm: Create keep-alive thread during probe"
2025-07-24 08:58:23 +02:00
target
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
2025-07-10 16:08:48 +02:00
tc
…
tee
optee: ffa: fix sleep in atomic context
2025-07-10 16:08:53 +02:00
thermal
thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit
2025-06-19 15:41:08 +02:00
thunderbolt
thunderbolt: Fix bit masking in tb_dp_port_set_hops()
2025-07-24 08:58:23 +02:00
tty
pch_uart: Fix dma_sync_sg_for_device() nents value
2025-07-24 08:58:23 +02:00
ufs
scsi: ufs: core: Fix spelling of a sysfs attribute name
2025-07-10 16:08:31 +02:00
uio
uio_hv_generic: Align ring size to system page
2025-06-27 11:13:08 +01:00
usb
usb: gadget: configfs: Fix OOB read on empty string write
2025-07-24 08:58:22 +02:00
vdpa
…
vfio
vfio/type1: Fix error unwind in migration dirty bitmap allocation
2025-06-19 15:39:59 +02:00
vhost
vhost-scsi: Fix vhost_scsi_send_status()
2025-04-18 10:08:11 -04:00
video
fbcon: Make sure modelist not set on unregistered console
2025-06-27 11:13:29 +01:00
virt
configfs-tsm-report: Fix NULL dereference of tsm_ops
2025-06-27 11:13:06 +01:00
virtio
virtio-pci: Fix result size returned for the admin command completion
2025-06-19 15:40:01 +02:00
w1
…
watchdog
watchdog: stm32: Fix wakeup source leaks on device unbind
2025-06-27 11:13:30 +01:00
xen
xen/x86: fix initial memory balloon target
2025-06-19 15:39:37 +02:00
zorro
…
Kconfig
fwctl: Add basic structure for a class subsystem with a cdev
2025-03-06 15:11:30 -04:00
Makefile
fwctl: Add basic structure for a class subsystem with a cdev
2025-03-06 15:11:30 -04:00