NoaSoftware
/
TencentOS-kernel
forked from TencentOS/TencentOS-kernel
0
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
TencentOS-kernel/drivers
History
Yang Yingliang 698df29c07 media: adv7604: fix possible use-after-free in adv76xx_remove() 
[ Upstream commit fa56f5f1fe31c2050675fa63b84963ebd504a5b3 ]

This driver's remove path calls cancel_delayed_work(). However, that
function does not wait until the work function finishes. This means
that the callback function may still be running after the driver's
remove function has finished, which would result in a use-after-free.

Fix by calling cancel_delayed_work_sync(), which ensures that
the work is properly cancelled, no longer running, and unable
to re-schedule itself.

Reported-by: Hulk Robot <hulkci@huawei.com>
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
 		2021-05-20 16:07:30 +08:00
..
accessibility
…
acpi ACPI: custom_method: fix a possible memory leak 2021-05-20 16:07:19 +08:00
amba amba: Fix resource leak for drivers without .remove 2021-04-12 12:52:26 +08:00
android binder: add flag to clear buffer on txn complete 2021-03-16 16:43:28 +08:00
ata ata: ahci: Disable SXS for Hisilicon Kunpeng920 2021-05-20 16:07:29 +08:00
atm atm: idt77252: fix null-ptr-dereference 2021-04-12 12:53:23 +08:00
auxdisplay auxdisplay: ht16k33: Fix refresh rate handling 2021-04-12 12:52:25 +08:00
base driver core: Fix locking bug in deferred_probe_timeout_work_func() 2021-05-20 16:07:06 +08:00
bcma
…
block xen-blkback: don't leak persistent grants from xen_blkbk_map() 2021-04-12 12:53:32 +08:00
bluetooth Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl 2021-04-12 12:52:46 +08:00
bus bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first 2021-05-20 16:07:23 +08:00
cdrom
…
char parisc: parisc-agp requires SBA IOMMU driver 2021-05-20 16:06:56 +08:00
clk clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return 2021-05-20 16:07:29 +08:00
clocksource clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined 2021-04-12 12:52:24 +08:00
connector
…
counter counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register 2021-05-20 16:06:54 +08:00
cpufreq cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev 2021-04-12 12:53:22 +08:00
cpuidle Intel: cpuidle: Allow idle states to be disabled by default 2021-04-25 14:31:12 +08:00
crypto crypto: omap-aes - Fix PM reference leak on omap-aes.c 2021-05-20 16:07:26 +08:00
dax device-dax/core: Fix memory leak when rmmod dax.ko 2021-03-16 16:43:45 +08:00
dca
…
devfreq PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out 2021-03-16 16:36:35 +08:00
dio
…
dma dmaengine: dw: Make it dependent to HAS_IOMEM 2021-05-20 16:07:08 +08:00
dma-buf dmabuf: fix use-after-free of dmabuf's file->f_inode 2021-04-12 12:51:14 +08:00
edac Intel: x86/mce: Fix all mce notifiers to update the mce->kflags bitmask 2021-04-25 14:31:15 +08:00
eisa
…
extcon extcon: arizona: Fix various races on driver unbind 2021-05-20 16:07:27 +08:00
firewire firewire: nosy: Fix a use-after-free bug in nosy_ioctl() 2021-05-20 16:06:50 +08:00
firmware firmware/efi: Fix a use after bug in efi_mem_reserve_persistent 2021-04-12 12:53:21 +08:00
fpga
…
fsi
…
gnss
…
gpio gpio: omap: Save and restore sysconfig 2021-05-20 16:07:14 +08:00
gpu drm/vkms: fix misuse of WARN_ON 2021-05-20 16:07:28 +08:00
greybus
…
hid HID: wacom: Assign boolean values to a bool variable 2021-05-20 16:07:15 +08:00
hsi HSI: Fix PM usage counter unbalance in ssi_hw_init 2021-04-12 12:52:22 +08:00
hv Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() 2021-04-12 12:52:21 +08:00
hwmon hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values 2021-04-12 12:51:24 +08:00
hwspinlock
…
hwtracing intel_th: Consistency and off-by-one fix 2021-05-20 16:07:25 +08:00
i2c i2c: turn recovery error on init to debug 2021-05-20 16:06:58 +08:00
i3c i3c master: fix missing destroy_workqueue() on error in i3c_master_register 2021-03-16 16:43:55 +08:00
ide scsi: ide: Do not set the RQF_PREEMPT flag for sense requests 2021-04-12 12:51:06 +08:00
idle Intel: intel_idle: Customize IceLake server support 2021-04-25 14:31:16 +08:00
iio iio: hid-sensor-temperature: Fix issues of timestamp channel 2021-04-12 12:53:19 +08:00
infiniband RDMA/addr: Be strict with gid size 2021-05-20 16:07:03 +08:00
input Input: i8042 - fix Pegatron C15B ID entry 2021-05-20 16:07:10 +08:00
interconnect interconnect: core: fix error return code of icc_link_destroy() 2021-05-20 16:07:05 +08:00
iommu iommu/amd: Fix performance counter initialization 2021-04-12 12:53:03 +08:00
ipack
…
irqchip irqchip/gic-v3: Do not enable irqs when handling spurious interrups 2021-05-20 16:07:22 +08:00
isdn mISDN: fix crash in fritzpci 2021-05-20 16:06:52 +08:00
leds leds: trigger: fix potential deadlock with libata 2021-04-12 12:51:44 +08:00
lightnvm lightnvm: fix memory leak when submit fails 2021-04-12 12:51:39 +08:00
macintosh macintosh/via-macii: Access autopoll_devs when inside lock 2021-03-16 16:33:39 +08:00
mailbox mailbox: avoid timer start from callback 2021-03-16 16:38:59 +08:00
mcb
…
md dm verity fec: fix misaligned RS roots IO 2021-05-20 16:07:11 +08:00
media media: adv7604: fix possible use-after-free in adv76xx_remove() 2021-05-20 16:07:30 +08:00
memory memory: ti-aemif: Drop child node when jumping out loop 2021-04-12 12:52:13 +08:00
memstick memstick: r592: Fix error return in r592_probe() 2021-03-16 16:43:02 +08:00
message scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() 2021-03-16 16:39:58 +08:00
mfd mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() 2021-04-12 12:52:27 +08:00
misc habanalabs: Call put_pid() when releasing control device 2021-04-12 12:53:24 +08:00
mmc mmc: sdhci-pci: Add PCI IDs for Intel LKF 2021-05-20 16:07:28 +08:00
mtd mtd: rawnand: atmel: Update ecc_stats.corrected counter 2021-05-20 16:07:20 +08:00
mux
…
net staging: wimax/i2400m: fix byte-order issue 2021-05-20 16:07:23 +08:00
nfc nfc: s3fwrn5: Release the nfc firmware 2021-03-16 16:43:15 +08:00
ntb NTB: hw: amd: fix an issue about leak system resources 2021-03-16 16:39:10 +08:00
nubus
…
nvdimm libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC 2021-05-20 16:07:11 +08:00
nvme nvme-mpath: replace direct_make_request with generic_make_request 2021-05-20 16:06:54 +08:00
nvmem nvmem: core: skip child nodes not matching binding 2021-04-12 12:52:30 +08:00
of of/fdt: Make sure no-map does not remove already reserved regions 2021-04-12 12:52:24 +08:00
opp opp: Reduce the size of critical section in _opp_table_kref_release() 2021-03-16 16:40:41 +08:00
oprofile
…
parisc parisc: mask out enable and reserved bits from sba imask 2021-03-16 16:33:54 +08:00
parport
…
pci PCI: PM: Do not read power state in pci_enable_device_flags() 2021-05-20 16:07:24 +08:00
pcmcia
…
perf perf/arm_pmu_platform: Fix error handling 2021-05-20 16:07:24 +08:00
phy phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() 2021-05-20 16:07:25 +08:00
pinctrl pinctrl: lewisburg: Update number of pins in community 2021-05-20 16:07:14 +08:00
platform platform/x86: intel_pmc_core: Don't use global pmcdev in quirks 2021-05-20 16:07:26 +08:00
pnp
…
power power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove() 2021-05-20 16:07:29 +08:00
powercap powercap: restrict energy meter to root access 2021-03-16 16:40:32 +08:00
pps
…
ps3 powerpc/ps3: use dma_mapping_error() 2021-03-16 16:43:15 +08:00
ptp
…
pwm pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() 2021-04-12 12:52:30 +08:00
rapidio rapidio: fix the missed put_device() for rio_mport_add_riodev 2021-03-16 16:38:59 +08:00
ras Intel: x86/mce: Fix all mce notifiers to update the mce->kflags bitmask 2021-04-25 14:31:15 +08:00
regulator regulator: bd9571mwv: Fix AVS and DVFS voltage range 2021-05-20 16:06:58 +08:00
remoteproc remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() 2021-03-16 16:43:11 +08:00
reset
…
rpmsg rpmsg: glink: Use complete_all for open states 2021-03-16 16:39:50 +08:00
rtc rtc: s5m: select REGMAP_I2C 2021-04-12 12:52:24 +08:00
s390 s390/dasd: fix hanging IO request during DASD driver unbind 2021-04-12 12:53:06 +08:00
sbus
…
scsi scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() 2021-05-20 16:07:29 +08:00
sfi
…
sh
…
siox
…
slimbus slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI 2021-03-16 16:42:54 +08:00
soc soc/fsl: qbman: fix conflicting alignment attributes 2021-05-20 16:07:01 +08:00
soundwire soundwire: cadence: fix ACK/NAK handling 2021-04-12 12:52:29 +08:00
spi spi: qup: fix PM reference leak in spi_qup_remove() 2021-05-20 16:07:25 +08:00
spmi spmi: spmi-pmic-arb: Fix hw_irq overflow 2021-04-12 12:52:39 +08:00
ssb
…
staging media: imx: capture: Return -EPIPE from __capture_legacy_try_fmt() 2021-05-20 16:07:27 +08:00
target scsi: target: pscsi: Fix warning in pscsi_complete_cmd() 2021-05-20 16:07:27 +08:00
tc
…
tee tee: optee: do not check memref size on return from Secure World 2021-05-20 16:07:24 +08:00
thermal thermal/core: Add NULL pointer check before using cooling device stats 2021-05-20 16:06:47 +08:00
thunderbolt thunderbolt: Fix use-after-free in remove_unplugged_switch() 2021-03-16 16:42:03 +08:00
tty tty: n_gsm: check error while registering tty devices 2021-05-20 16:07:25 +08:00
uio uio: avoid to request_irq when the legacy irq is not connected 2021-03-16 16:43:58 +08:00
usb usb: core: hub: Fix PM reference leak in usb_port_resume() 2021-05-20 16:07:25 +08:00
vfio vfio: Depend on MMU 2021-05-20 16:07:19 +08:00
vhost vhost: Fix vhost_vq_reset() 2021-05-20 16:06:46 +08:00
video fbdev: zero-fill colormap in fbcmap.c 2021-05-20 16:07:23 +08:00
virt virt: vbox: Do not use wait_event_interruptible when called from kernel context 2021-04-12 12:52:10 +08:00
virtio virtio_ring: Fix two use after free bugs 2021-03-16 16:43:19 +08:00
visorbus
…
vlynq
…
vme
…
w1 w1: mxc_w1: Fix timeout resolution problem leading to bus error 2021-03-16 16:39:58 +08:00
watchdog watchdog: mei_wdt: request stop on unregister 2021-04-12 12:52:38 +08:00
xen xen/events: fix setting irq affinity 2021-05-20 16:07:06 +08:00
zorro
…
Kconfig
…
Makefile
…