dri-devel Archive on lore.kernel.org
 help / color / mirror / Atom feed
From: Helge Deller <deller@kernel.org>
To: Linus Torvalds <torvalds@linux-foundation.org>,
	linux-kernel@vger.kernel.org, linux-fbdev@vger.kernel.org,
	dri-devel@lists.freedesktop.org
Subject: [GIT PULL] fbdev fixes for v7.3-rc3
Date: Sat, 12 Sep 2026 10:47:58 +0200	[thread overview]
Message-ID: <aqURvm8xf2oDLypa@carbonx1> (raw)

Dear Linus,

please pull a few fbdev fixes for kernel v7.3-rc3:

Two patches for VT core code and fbcon prevent potential out-of-bounds
reads on font or screen size changes, one fix limits the Superblitter in
atafb to supported modes only, and some minor fixes for vfb, ssd1307fb
and omapfb.

Thanks!
Helge

----------------------------------------------------------------
The following changes since commit 26260251022fbc2f248a3d747a9b2b961b18d2d8:

  Merge tag 'livepatching-for-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/livepatching/livepatching (2026-08-21 13:11:56 -0700)

are available in the Git repository at:

  http://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git tags/fbdev-for-7.3-rc3

for you to fetch changes up to a0a34a40ed299c9c7cff6af163a5b883ee9d6d73:

  fbdev: vfb: defer cleanup until the last reference (2026-09-10 22:52:02 +0200)

----------------------------------------------------------------
fbdev fixes for 7.3-rc3:

- vt core: prevent potential out of bounds read on font change
- fbcon: prevent out of bounds read when logo bigger than screen
- atafb: limit SuperBlitter operations to supported layouts only
- vfb: fix driver removal cleanup sequence
- ssd1307fb: fix possible NULL pointer dereference on missing match data
- omapfb: Fix sparse warning in panel_enabled()

----------------------------------------------------------------
Helge Deller (3):
      vt: hide cursor prior to font changes to avoid out-of-bound reads
      fbdev: omapfb: Fix __be32 sparse warning in panel_enabled()
      fbcon: Fix KASAN slab-out-of-bounds Read in fbcon_prepare_logo

Linmao Li (1):
      fbdev: atafb: Restrict SuperBlitter to supported formats

Weiming Shi (1):
      fbdev: vfb: defer cleanup until the last reference

Yang Zi (1):
      fbdev: ssd1307fb: fix NULL pointer dereference on missing match data

 drivers/tty/vt/vt.c                                           |  9 +++++----
 drivers/video/fbdev/atafb.c                                   |  6 +++++-
 drivers/video/fbdev/core/fbcon.c                              |  7 +++++++
 .../video/fbdev/omap2/omapfb/displays/panel-sony-acx565akm.c  |  5 +++--
 drivers/video/fbdev/ssd1307fb.c                               |  4 ++++
 drivers/video/fbdev/vfb.c                                     | 11 ++++++++---
 6 files changed, 32 insertions(+), 10 deletions(-)

             reply	other threads:[~2026-09-12  8:48 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-09-12  8:47 Helge Deller [this message]
2026-09-12 15:16 ` [GIT PULL] fbdev fixes for v7.3-rc3 pr-tracker-bot

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=aqURvm8xf2oDLypa@carbonx1 \
    --to=deller@kernel.org \
    --cc=dri-devel@lists.freedesktop.org \
    --cc=linux-fbdev@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=torvalds@linux-foundation.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox