armbian/linux-rockchip
0
0
Fork 0
mirror of https://github.com/armbian/linux-rockchip.git synced 2026-01-06 11:08:10 -08:00
Code Issues Packages Projects Releases Wiki Activity
Files
0dc6a06c484360e5dddf920efe2cf57b7772c35a
linux-rockchip/drivers
History
Igor Russkikh a51f71cd4f net: atlantic: fix double free in ring reinit logic 
[ Upstream commit 7bb26ea74aa86fdf894b7dbd8c5712c5b4187da7 ]

Driver has a logic leak in ring data allocation/free,
where double free may happen in aq_ring_free if system is under
stress and driver init/deinit is happening.

The probability is higher to get this during suspend/resume cycle.

Verification was done simulating same conditions with

    stress -m 2000 --vm-bytes 20M --vm-hang 10 --backoff 1000
    while true; do sudo ifconfig enp1s0 down; sudo ifconfig enp1s0 up; done

Fixed by explicitly clearing pointers to NULL on deallocation

Fixes: 018423e90b ("net: ethernet: aquantia: Add ring support code")
Reported-by: Linus Torvalds <torvalds@linux-foundation.org>
Closes: https://lore.kernel.org/netdev/CAHk-=wiZZi7FcvqVSUirHBjx0bBUZ4dFrMDVLc3+3HCrtq0rBA@mail.gmail.com/
Signed-off-by: Igor Russkikh <irusskikh@marvell.com>
Link: https://lore.kernel.org/r/20231213094044.22988-1-irusskikh@marvell.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-12-20 17:00:19 +01:00
..
accessibility
…
acpi
iommu: Avoid more races around device probe
2023-12-13 18:39:17 +01:00
amba
amba: bus: fix refcount leak
2023-09-13 09:42:56 +02:00
android
binder: fix memory leaks of spam and pending work
2023-12-13 18:39:22 +01:00
ata
scsi: sd: Fix system start for ATA devices
2023-12-08 08:51:14 +01:00
atm
atm: solos-pci: Fix potential deadlock on &tx_queue_lock
2023-12-20 17:00:16 +01:00
auxdisplay
auxdisplay: hd44780: move cursor home after clear display command
2023-12-08 08:51:16 +01:00
base
devcoredump: Send uevent once devcd is ready
2023-12-13 18:39:28 +01:00
bcma
…
block
virtio-blk: fix implicit overflow on virtio_max_dma_size
2023-11-28 17:07:02 +00:00
bluetooth
Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE
2023-11-28 17:07:17 +00:00
bus
bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up
2023-10-06 14:56:48 +02:00
cdrom
…
char
hwrng: geode - fix accessing registers
2023-11-20 11:52:04 +01:00
clk
clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider
2023-11-28 17:07:16 +00:00
clocksource
clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware
2023-11-28 17:06:55 +00:00
comedi
…
connector
…
counter
counter: microchip-tcb-capture: Fix the use of internal GCLK logic
2023-10-19 23:08:58 +02:00
cpufreq
cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
2023-12-08 08:51:19 +01:00
cpuidle
…
crypto
crypto: hisilicon/qm - prevent soft lockup in receive loop
2023-11-28 17:07:00 +00:00
cxl
cxl/port: Fix NULL pointer access in devm_cxl_add_port()
2023-11-28 17:07:23 +00:00
dax
…
dca
…
devfreq
PM / devfreq: rockchip-dfi: Make pmu regmap mandatory
2023-11-20 11:51:54 +01:00
dio
…
dma
dmaengine: stm32-mdma: correct desc prep when channel running
2023-11-28 17:07:13 +00:00
dma-buf
dma-buf: fix check in dma_resv_add_fence
2023-12-08 08:51:15 +01:00
edac
…
eisa
…
extcon
extcon: cht_wc: add POWER_SUPPLY dependency
2023-09-13 09:42:53 +02:00
firewire
scsi: Change SCSI device boolean fields to single bit flags
2023-12-08 08:51:14 +01:00
firmware
firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit
2023-11-28 17:07:12 +00:00
fpga
…
fsi
fsi: aspeed: Reset master errors after CFAM reset
2023-09-13 09:42:54 +02:00
gnss
…
gpio
gpiolib: sysfs: Fix error handling on failed export
2023-12-13 18:39:24 +01:00
gpu
drm/i915: Skip some timing checks on BXT/GLK DSI transcoders
2023-12-13 18:39:30 +01:00
greybus
…
hid
HID: lenovo: Restrict detection of patched firmware only to USB cptkbd
2023-12-20 17:00:15 +01:00
hsi
…
hte
hte: tegra: Fix missing error code in tegra_hte_test_probe()
2023-11-20 11:51:58 +01:00
hv
Drivers: hv: vmbus: Don't dereference ACPI root object handle
2023-09-13 09:42:59 +02:00
hwmon
hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe()
2023-12-13 18:39:14 +01:00
hwspinlock
hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation
2023-09-19 12:28:05 +02:00
hwtracing
hwtracing: hisi_ptt: Add dummy callback pmu::read()
2023-12-13 18:39:22 +01:00
i2c
i2c: designware: Fix corrupted memory seen in the ISR
2023-12-13 18:39:03 +01:00
i3c
i3c: master: svc: fix random hot join failure since timeout error
2023-11-28 17:07:17 +00:00
idle
intel_idle: add Emerald Rapids Xeon support
2023-10-10 22:00:44 +02:00
iio
iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe()
2023-11-28 17:07:01 +00:00
infiniband
RDMA/irdma: Avoid free the non-cqp_request scratch
2023-12-13 18:39:15 +01:00
input
Input: xpad - add HyperX Clutch Gladiate Support
2023-12-08 08:51:16 +01:00
interconnect
interconnect: qcom: sm8350: Set ACV enable_mask
2023-11-20 11:52:12 +01:00
iommu
iommu: Avoid more races around device probe
2023-12-13 18:39:17 +01:00
ipack
…
irqchip
irqchip/stm32-exti: add missing DT IRQ flag translation
2023-11-08 14:10:57 +01:00
isdn
…
leds
leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu'
2023-11-20 11:52:08 +01:00
macintosh
…
mailbox
mailbox: qcom-ipcc: fix incorrect num_chans counting
2023-09-19 12:27:58 +02:00
mcb
mcb: fix error handling for different scenarios when parsing
2023-11-28 17:07:13 +00:00
md
md/raid6: use valid sector values to determine if an I/O should wait on the reshape
2023-12-13 18:39:21 +01:00
media
media: qcom: camss: Fix genpd cleanup
2023-12-03 07:32:10 +01:00
memory
…
memstick
…
message
…
mfd
mfd: qcom-spmi-pmic: Fix revid implementation
2023-11-28 17:07:12 +00:00
misc
misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write
2023-12-13 18:39:23 +01:00
mmc
mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled
2023-12-08 08:51:19 +01:00
most
…
mtd
mtd: cfi_cmdset_0001: Byte swap OTP info
2023-11-28 17:07:14 +00:00
mux
…
net
net: atlantic: fix double free in ring reinit logic
2023-12-20 17:00:19 +01:00
nfc
…
ntb
ntb: Fix calculation ntb_transport_tx_free_entry()
2023-09-13 09:43:02 +02:00
nubus
…
nvdimm
nd_btt: Make BTT lanes preemptible
2023-11-20 11:52:05 +01:00
nvme
nvme-pci: Add sleep quirk for Kingston drives
2023-12-13 18:39:17 +01:00
nvmem
nvmem: imx: correct nregs for i.MX6UL
2023-11-02 09:35:31 +01:00
of
of: dynamic: Fix of_reconfig_get_state_change() return value documentation
2023-12-13 18:39:05 +01:00
opp
…
parisc
parisc/power: Fix power soft-off when running on qemu
2023-11-28 17:07:14 +00:00
parport
parport: Add support for Brainboxes IX/UC/PX parallel cards
2023-12-13 18:39:26 +01:00
pci
PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers
2023-12-08 08:51:18 +01:00
pcmcia
pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
2023-11-20 11:52:13 +01:00
peci
…
perf
perf: hisi: Fix use-after-free when register pmu fails
2023-11-20 11:52:01 +01:00
phy
phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
2023-10-25 12:03:16 +02:00
pinctrl
pinctrl: avoid reload of p state in list iteration
2023-12-08 08:51:13 +01:00
platform
platform/surface: aggregator: fix recv_buf() return value
2023-12-13 18:39:20 +01:00
pnp
…
power
power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint
2023-11-08 14:11:02 +01:00
powercap
powercap: DTPM: Fix missing cpufreq_cpu_put() calls
2023-12-13 18:39:21 +01:00
pps
…
ps3
…
ptp
ptp: annotate data-race around q->head and q->tail
2023-11-28 17:07:05 +00:00
pwm
pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
2023-11-20 11:52:15 +01:00
rapidio
…
ras
…
regulator
regulator: mt6358: Fail probe on unknown chip ID
2023-11-20 11:51:56 +01:00
remoteproc
…
reset
…
rpmsg
rpmsg: glink: Add check for kstrdup
2023-09-13 09:42:58 +02:00
rtc
rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
2023-11-20 11:52:13 +01:00
s390
s390/dasd: protect device queue against concurrent access
2023-12-03 07:32:11 +01:00
sbus
…
scsi
scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()
2023-12-13 18:39:16 +01:00
sh
…
siox
…
slimbus
…
soc
pmdomain: imx: Make imx pgc power domain also set the fwnode
2023-11-28 17:07:16 +00:00
soundwire
soundwire: dmi-quirks: update HP Omen match
2023-11-28 17:07:01 +00:00
spi
spi: Fix null dereference on suspend
2023-12-08 08:51:19 +01:00
spmi
…
ssb
…
staging
net: vlan: introduce skb_vlan_eth_hdr()
2023-12-20 17:00:16 +01:00
target
scsi: target: core: Fix deadlock due to recursive locking
2023-10-10 22:00:41 +02:00
tc
…
tee
tee: optee: Fix supplicant based device enumeration
2023-12-13 18:39:12 +01:00
thermal
thermal: core: prevent potential string overflow
2023-11-20 11:51:54 +01:00
thunderbolt
thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager
2023-11-28 17:07:01 +00:00
tty
serial: 8250_omap: Add earlycon support for the AM654 UART controller
2023-12-13 18:39:28 +01:00
ufs
scsi: ufs: core: Leave space for '\0' in utf8 desc string
2023-11-20 11:52:07 +01:00
uio
…
usb
USB: gadget: core: adjust uevent timing on gadget unbind
2023-12-13 18:39:28 +01:00
vdpa
vdpa/mlx5: preserve CVQ vringh index
2023-12-13 18:39:03 +01:00
vfio
vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent()
2023-10-06 14:56:45 +02:00
vhost
vhost-vdpa: fix use after free in vhost_vdpa_probe()
2023-11-28 17:07:04 +00:00
video
fbdev: stifb: Make the STI next font pointer a 32-bit signed offset
2023-12-08 08:51:19 +01:00
virt
virt: sevguest: Fix passing a stack buffer as a scatterlist target
2023-11-20 11:52:13 +01:00
virtio
virtio_pci: fix the common cfg map size
2023-11-02 09:35:23 +01:00
vlynq
…
w1
…
watchdog
sbsa_gwdt: Calculate timeout with 64-bit math
2023-11-28 17:07:18 +00:00
xen
xen: simplify evtchn_do_upcall() call maze
2023-12-08 08:51:20 +01:00
zorro
…
Kconfig
…
Makefile
…