From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: stable@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
patches@lists.linux.dev, Olivier Sobrie <olivier@sobrie.be>,
Basavaraj Natikar <Basavaraj.Natikar@amd.com>,
Jiri Kosina <jkosina@suse.com>, Sasha Levin <sashal@kernel.org>
Subject: [PATCH 6.10 266/375] HID: amd_sfh: free driver_data after destroying hid device
Date: Tue, 10 Sep 2024 11:31:03 +0200 [thread overview]
Message-ID: <20240910092631.485101024@linuxfoundation.org> (raw)
In-Reply-To: <20240910092622.245959861@linuxfoundation.org>
6.10-stable review patch. If anyone has any objections, please let me know.
------------------
From: Olivier Sobrie <olivier@sobrie.be>
[ Upstream commit 97155021ae17b86985121b33cf8098bcde00d497 ]
HID driver callbacks aren't called anymore once hid_destroy_device() has
been called. Hence, hid driver_data should be freed only after the
hid_destroy_device() function returned as driver_data is used in several
callbacks.
I observed a crash with kernel 6.10.0 on my T14s Gen 3, after enabling
KASAN to debug memory allocation, I got this output:
[ 13.050438] ==================================================================
[ 13.054060] BUG: KASAN: slab-use-after-free in amd_sfh_get_report+0x3ec/0x530 [amd_sfh]
[ 13.054809] psmouse serio1: trackpoint: Synaptics TrackPoint firmware: 0x02, buttons: 3/3
[ 13.056432] Read of size 8 at addr ffff88813152f408 by task (udev-worker)/479
[ 13.060970] CPU: 5 PID: 479 Comm: (udev-worker) Not tainted 6.10.0-arch1-2 #1 893bb55d7f0073f25c46adbb49eb3785fefd74b0
[ 13.063978] Hardware name: LENOVO 21CQCTO1WW/21CQCTO1WW, BIOS R22ET70W (1.40 ) 03/21/2024
[ 13.067860] Call Trace:
[ 13.069383] input: TPPS/2 Synaptics TrackPoint as /devices/platform/i8042/serio1/input/input8
[ 13.071486] <TASK>
[ 13.071492] dump_stack_lvl+0x5d/0x80
[ 13.074870] snd_hda_intel 0000:33:00.6: enabling device (0000 -> 0002)
[ 13.078296] ? amd_sfh_get_report+0x3ec/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38]
[ 13.082199] print_report+0x174/0x505
[ 13.085776] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 13.089367] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.093255] ? amd_sfh_get_report+0x3ec/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38]
[ 13.097464] kasan_report+0xc8/0x150
[ 13.101461] ? amd_sfh_get_report+0x3ec/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38]
[ 13.105802] amd_sfh_get_report+0x3ec/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38]
[ 13.110303] amdtp_hid_request+0xb8/0x110 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38]
[ 13.114879] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.119450] sensor_hub_get_feature+0x1d3/0x540 [hid_sensor_hub 3f13be3016ff415bea03008d45d99da837ee3082]
[ 13.124097] hid_sensor_parse_common_attributes+0x4d0/0xad0 [hid_sensor_iio_common c3a5cbe93969c28b122609768bbe23efe52eb8f5]
[ 13.127404] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.131925] ? __pfx_hid_sensor_parse_common_attributes+0x10/0x10 [hid_sensor_iio_common c3a5cbe93969c28b122609768bbe23efe52eb8f5]
[ 13.136455] ? _raw_spin_lock_irqsave+0x96/0xf0
[ 13.140197] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 13.143602] ? devm_iio_device_alloc+0x34/0x50 [industrialio 3d261d5e5765625d2b052be40e526d62b1d2123b]
[ 13.147234] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.150446] ? __devm_add_action+0x167/0x1d0
[ 13.155061] hid_gyro_3d_probe+0x120/0x7f0 [hid_sensor_gyro_3d 63da36a143b775846ab2dbb86c343b401b5e3172]
[ 13.158581] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.161814] platform_probe+0xa2/0x150
[ 13.165029] really_probe+0x1e3/0x8a0
[ 13.168243] __driver_probe_device+0x18c/0x370
[ 13.171500] driver_probe_device+0x4a/0x120
[ 13.175000] __driver_attach+0x190/0x4a0
[ 13.178521] ? __pfx___driver_attach+0x10/0x10
[ 13.181771] bus_for_each_dev+0x106/0x180
[ 13.185033] ? __pfx__raw_spin_lock+0x10/0x10
[ 13.188229] ? __pfx_bus_for_each_dev+0x10/0x10
[ 13.191446] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.194382] bus_add_driver+0x29e/0x4d0
[ 13.197328] driver_register+0x1a5/0x360
[ 13.200283] ? __pfx_hid_gyro_3d_platform_driver_init+0x10/0x10 [hid_sensor_gyro_3d 63da36a143b775846ab2dbb86c343b401b5e3172]
[ 13.203362] do_one_initcall+0xa7/0x380
[ 13.206432] ? __pfx_do_one_initcall+0x10/0x10
[ 13.210175] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.213211] ? kasan_unpoison+0x44/0x70
[ 13.216688] do_init_module+0x238/0x750
[ 13.219696] load_module+0x5011/0x6af0
[ 13.223096] ? kasan_save_stack+0x30/0x50
[ 13.226743] ? kasan_save_track+0x14/0x30
[ 13.230080] ? kasan_save_free_info+0x3b/0x60
[ 13.233323] ? poison_slab_object+0x109/0x180
[ 13.236778] ? __pfx_load_module+0x10/0x10
[ 13.239703] ? poison_slab_object+0x109/0x180
[ 13.243070] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.245924] ? init_module_from_file+0x13d/0x150
[ 13.248745] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.251503] ? init_module_from_file+0xdf/0x150
[ 13.254198] init_module_from_file+0xdf/0x150
[ 13.256826] ? __pfx_init_module_from_file+0x10/0x10
[ 13.259428] ? kasan_save_track+0x14/0x30
[ 13.261959] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.264471] ? kasan_save_free_info+0x3b/0x60
[ 13.267026] ? poison_slab_object+0x109/0x180
[ 13.269494] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.271949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.274324] ? _raw_spin_lock+0x85/0xe0
[ 13.276671] ? __pfx__raw_spin_lock+0x10/0x10
[ 13.278963] ? __rseq_handle_notify_resume+0x1a6/0xad0
[ 13.281193] idempotent_init_module+0x23b/0x650
[ 13.283420] ? __pfx_idempotent_init_module+0x10/0x10
[ 13.285619] ? __pfx___seccomp_filter+0x10/0x10
[ 13.287714] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.289828] ? __fget_light+0x57/0x420
[ 13.291870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.293880] ? security_capable+0x74/0xb0
[ 13.295820] __x64_sys_finit_module+0xbe/0x130
[ 13.297874] do_syscall_64+0x82/0x190
[ 13.299898] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.301905] ? irqtime_account_irq+0x3d/0x1f0
[ 13.303877] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.305753] ? __irq_exit_rcu+0x4e/0x130
[ 13.307577] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.309489] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 13.311371] RIP: 0033:0x7a21f96ade9d
[ 13.313234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 63 de 0c 00 f7 d8 64 89 01 48
[ 13.317051] RSP: 002b:00007ffeae934e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[ 13.319024] RAX: ffffffffffffffda RBX: 00005987276bfcf0 RCX: 00007a21f96ade9d
[ 13.321100] RDX: 0000000000000004 RSI: 00007a21f8eda376 RDI: 000000000000001c
[ 13.323314] RBP: 00007a21f8eda376 R08: 0000000000000001 R09: 00007ffeae934ec0
[ 13.325505] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000020000
[ 13.327637] R13: 00005987276c1250 R14: 0000000000000000 R15: 00005987276c4530
[ 13.329737] </TASK>
[ 13.333945] Allocated by task 139:
[ 13.336111] kasan_save_stack+0x30/0x50
[ 13.336121] kasan_save_track+0x14/0x30
[ 13.336125] __kasan_kmalloc+0xaa/0xb0
[ 13.336129] amdtp_hid_probe+0xb1/0x440 [amd_sfh]
[ 13.336138] amd_sfh_hid_client_init+0xb8a/0x10f0 [amd_sfh]
[ 13.336144] sfh_init_work+0x47/0x120 [amd_sfh]
[ 13.336150] process_one_work+0x673/0xeb0
[ 13.336155] worker_thread+0x795/0x1250
[ 13.336160] kthread+0x290/0x350
[ 13.336164] ret_from_fork+0x34/0x70
[ 13.336169] ret_from_fork_asm+0x1a/0x30
[ 13.338175] Freed by task 139:
[ 13.340064] kasan_save_stack+0x30/0x50
[ 13.340072] kasan_save_track+0x14/0x30
[ 13.340076] kasan_save_free_info+0x3b/0x60
[ 13.340081] poison_slab_object+0x109/0x180
[ 13.340085] __kasan_slab_free+0x32/0x50
[ 13.340089] kfree+0xe5/0x310
[ 13.340094] amdtp_hid_remove+0xb2/0x160 [amd_sfh]
[ 13.340102] amd_sfh_hid_client_deinit+0x324/0x640 [amd_sfh]
[ 13.340107] amd_sfh_hid_client_init+0x94a/0x10f0 [amd_sfh]
[ 13.340113] sfh_init_work+0x47/0x120 [amd_sfh]
[ 13.340118] process_one_work+0x673/0xeb0
[ 13.340123] worker_thread+0x795/0x1250
[ 13.340127] kthread+0x290/0x350
[ 13.340132] ret_from_fork+0x34/0x70
[ 13.340136] ret_from_fork_asm+0x1a/0x30
[ 13.342482] The buggy address belongs to the object at ffff88813152f400
which belongs to the cache kmalloc-64 of size 64
[ 13.347357] The buggy address is located 8 bytes inside of
freed 64-byte region [ffff88813152f400, ffff88813152f440)
[ 13.347367] The buggy address belongs to the physical page:
[ 13.355409] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13152f
[ 13.355416] anon flags: 0x2ffff8000000000(node=0|zone=2|lastcpupid=0x1ffff)
[ 13.355423] page_type: 0xffffefff(slab)
[ 13.355429] raw: 02ffff8000000000 ffff8881000428c0 ffffea0004c43a00 0000000000000005
[ 13.355435] raw: 0000000000000000 0000000000200020 00000001ffffefff 0000000000000000
[ 13.355439] page dumped because: kasan: bad access detected
[ 13.357295] Memory state around the buggy address:
[ 13.357299] ffff88813152f300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 13.357303] ffff88813152f380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 13.357306] >ffff88813152f400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 13.357309] ^
[ 13.357311] ffff88813152f480: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 13.357315] ffff88813152f500: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc
[ 13.357318] ==================================================================
[ 13.357405] Disabling lock debugging due to kernel taint
[ 13.383534] Oops: general protection fault, probably for non-canonical address 0xe0a1bc4140000013: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 13.383544] KASAN: maybe wild-memory-access in range [0x050e020a00000098-0x050e020a0000009f]
[ 13.383551] CPU: 3 PID: 479 Comm: (udev-worker) Tainted: G B 6.10.0-arch1-2 #1 893bb55d7f0073f25c46adbb49eb3785fefd74b0
[ 13.383561] Hardware name: LENOVO 21CQCTO1WW/21CQCTO1WW, BIOS R22ET70W (1.40 ) 03/21/2024
[ 13.383565] RIP: 0010:amd_sfh_get_report+0x81/0x530 [amd_sfh]
[ 13.383580] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 78 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 08 49 8d 7c 24 10 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 1a 03 00 00 45 8b 74 24 10 45
[ 13.383585] RSP: 0018:ffff8881261f7388 EFLAGS: 00010212
[ 13.383592] RAX: dffffc0000000000 RBX: ffff88813152f400 RCX: 0000000000000002
[ 13.383597] RDX: 00a1c04140000013 RSI: 0000000000000008 RDI: 050e020a0000009b
[ 13.383600] RBP: ffff88814d010000 R08: 0000000000000002 R09: fffffbfff3ddb8c0
[ 13.383604] R10: ffffffff9eedc607 R11: ffff88810ce98000 R12: 050e020a0000008b
[ 13.383607] R13: ffff88814d010000 R14: dffffc0000000000 R15: 0000000000000004
[ 13.383611] FS: 00007a21f94d0880(0000) GS:ffff8887e7d80000(0000) knlGS:0000000000000000
[ 13.383615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 13.383618] CR2: 00007e0014c438f0 CR3: 000000012614c000 CR4: 0000000000f50ef0
[ 13.383622] PKRU: 55555554
[ 13.383625] Call Trace:
[ 13.383629] <TASK>
[ 13.383632] ? __die_body.cold+0x19/0x27
[ 13.383644] ? die_addr+0x46/0x70
[ 13.383652] ? exc_general_protection+0x150/0x240
[ 13.383664] ? asm_exc_general_protection+0x26/0x30
[ 13.383674] ? amd_sfh_get_report+0x81/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38]
[ 13.383686] ? amd_sfh_get_report+0x3ec/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38]
[ 13.383697] amdtp_hid_request+0xb8/0x110 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38]
[ 13.383706] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.383713] sensor_hub_get_feature+0x1d3/0x540 [hid_sensor_hub 3f13be3016ff415bea03008d45d99da837ee3082]
[ 13.383727] hid_sensor_parse_common_attributes+0x4d0/0xad0 [hid_sensor_iio_common c3a5cbe93969c28b122609768bbe23efe52eb8f5]
[ 13.383739] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.383745] ? __pfx_hid_sensor_parse_common_attributes+0x10/0x10 [hid_sensor_iio_common c3a5cbe93969c28b122609768bbe23efe52eb8f5]
[ 13.383753] ? _raw_spin_lock_irqsave+0x96/0xf0
[ 13.383762] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 13.383768] ? devm_iio_device_alloc+0x34/0x50 [industrialio 3d261d5e5765625d2b052be40e526d62b1d2123b]
[ 13.383790] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.383795] ? __devm_add_action+0x167/0x1d0
[ 13.383806] hid_gyro_3d_probe+0x120/0x7f0 [hid_sensor_gyro_3d 63da36a143b775846ab2dbb86c343b401b5e3172]
[ 13.383818] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.383826] platform_probe+0xa2/0x150
[ 13.383832] really_probe+0x1e3/0x8a0
[ 13.383838] __driver_probe_device+0x18c/0x370
[ 13.383844] driver_probe_device+0x4a/0x120
[ 13.383851] __driver_attach+0x190/0x4a0
[ 13.383857] ? __pfx___driver_attach+0x10/0x10
[ 13.383863] bus_for_each_dev+0x106/0x180
[ 13.383868] ? __pfx__raw_spin_lock+0x10/0x10
[ 13.383874] ? __pfx_bus_for_each_dev+0x10/0x10
[ 13.383880] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.383887] bus_add_driver+0x29e/0x4d0
[ 13.383895] driver_register+0x1a5/0x360
[ 13.383902] ? __pfx_hid_gyro_3d_platform_driver_init+0x10/0x10 [hid_sensor_gyro_3d 63da36a143b775846ab2dbb86c343b401b5e3172]
[ 13.383910] do_one_initcall+0xa7/0x380
[ 13.383919] ? __pfx_do_one_initcall+0x10/0x10
[ 13.383927] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.383933] ? kasan_unpoison+0x44/0x70
[ 13.383943] do_init_module+0x238/0x750
[ 13.383955] load_module+0x5011/0x6af0
[ 13.383962] ? kasan_save_stack+0x30/0x50
[ 13.383968] ? kasan_save_track+0x14/0x30
[ 13.383973] ? kasan_save_free_info+0x3b/0x60
[ 13.383980] ? poison_slab_object+0x109/0x180
[ 13.383993] ? __pfx_load_module+0x10/0x10
[ 13.384007] ? poison_slab_object+0x109/0x180
[ 13.384012] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384018] ? init_module_from_file+0x13d/0x150
[ 13.384025] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384032] ? init_module_from_file+0xdf/0x150
[ 13.384037] init_module_from_file+0xdf/0x150
[ 13.384044] ? __pfx_init_module_from_file+0x10/0x10
[ 13.384050] ? kasan_save_track+0x14/0x30
[ 13.384055] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384060] ? kasan_save_free_info+0x3b/0x60
[ 13.384066] ? poison_slab_object+0x109/0x180
[ 13.384071] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384080] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384085] ? _raw_spin_lock+0x85/0xe0
[ 13.384091] ? __pfx__raw_spin_lock+0x10/0x10
[ 13.384096] ? __rseq_handle_notify_resume+0x1a6/0xad0
[ 13.384106] idempotent_init_module+0x23b/0x650
[ 13.384114] ? __pfx_idempotent_init_module+0x10/0x10
[ 13.384120] ? __pfx___seccomp_filter+0x10/0x10
[ 13.384129] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384135] ? __fget_light+0x57/0x420
[ 13.384142] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384147] ? security_capable+0x74/0xb0
[ 13.384157] __x64_sys_finit_module+0xbe/0x130
[ 13.384164] do_syscall_64+0x82/0x190
[ 13.384174] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384179] ? irqtime_account_irq+0x3d/0x1f0
[ 13.384188] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384193] ? __irq_exit_rcu+0x4e/0x130
[ 13.384201] ? srso_alias_return_thunk+0x5/0xfbef5
[ 13.384206] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 13.384212] RIP: 0033:0x7a21f96ade9d
[ 13.384263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 63 de 0c 00 f7 d8 64 89 01 48
[ 13.384267] RSP: 002b:00007ffeae934e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[ 13.384273] RAX: ffffffffffffffda RBX: 00005987276bfcf0 RCX: 00007a21f96ade9d
[ 13.384277] RDX: 0000000000000004 RSI: 00007a21f8eda376 RDI: 000000000000001c
[ 13.384280] RBP: 00007a21f8eda376 R08: 0000000000000001 R09: 00007ffeae934ec0
[ 13.384284] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000020000
[ 13.384288] R13: 00005987276c1250 R14: 0000000000000000 R15: 00005987276c4530
[ 13.384297] </TASK>
[ 13.384299] Modules linked in: soundwire_amd(+) hid_sensor_gyro_3d(+) hid_sensor_magn_3d hid_sensor_accel_3d soundwire_generic_allocation amdxcp hid_sensor_trigger drm_exec industrialio_triggered_buffer soundwire_bus gpu_sched kvm_amd kfifo_buf qmi_helpers joydev drm_buddy hid_sensor_iio_common mousedev snd_soc_core industrialio i2c_algo_bit mac80211 snd_compress drm_suballoc_helper kvm snd_hda_intel drm_ttm_helper ac97_bus snd_pcm_dmaengine snd_intel_dspcfg ttm thinkpad_acpi(+) snd_intel_sdw_acpi hid_sensor_hub snd_rpl_pci_acp6x drm_display_helper snd_hda_codec hid_multitouch libarc4 snd_acp_pci platform_profile think_lmi(+) hid_generic firmware_attributes_class wmi_bmof cec snd_acp_legacy_common sparse_keymap rapl snd_hda_core psmouse cfg80211 pcspkr snd_pci_acp6x snd_hwdep video snd_pcm snd_pci_acp5x snd_timer snd_rn_pci_acp3x ucsi_acpi snd_acp_config snd sp5100_tco rfkill snd_soc_acpi typec_ucsi thunderbolt amd_sfh k10temp mhi soundcore i2c_piix4 snd_pci_acp3x typec i2c_hid_acpi roles i2c_hid wmi acpi_tad amd_pmc
[ 13.384454] mac_hid i2c_dev crypto_user loop nfnetlink zram ip_tables x_tables dm_crypt cbc encrypted_keys trusted asn1_encoder tee dm_mod crct10dif_pclmul crc32_pclmul polyval_clmulni polyval_generic gf128mul ghash_clmulni_intel serio_raw sha512_ssse3 atkbd sha256_ssse3 libps2 sha1_ssse3 vivaldi_fmap nvme aesni_intel crypto_simd nvme_core cryptd ccp xhci_pci i8042 nvme_auth xhci_pci_renesas serio vfat fat btrfs blake2b_generic libcrc32c crc32c_generic crc32c_intel xor raid6_pq
[ 13.384552] ---[ end trace 0000000000000000 ]---
KASAN reports a use-after-free of hid->driver_data in function
amd_sfh_get_report(). The backtrace indicates that the function is called
by amdtp_hid_request() which is one of the callbacks of hid device.
The current make sure that driver_data is freed only once
hid_destroy_device() returned.
Note that I observed the crash both on v6.9.9 and v6.10.0. The
code seems to be as it was from the early days of the driver.
Signed-off-by: Olivier Sobrie <olivier@sobrie.be>
Acked-by: Basavaraj Natikar <Basavaraj.Natikar@amd.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/hid/amd-sfh-hid/amd_sfh_hid.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/drivers/hid/amd-sfh-hid/amd_sfh_hid.c b/drivers/hid/amd-sfh-hid/amd_sfh_hid.c
index 705b52337068..81f3024b7b1b 100644
--- a/drivers/hid/amd-sfh-hid/amd_sfh_hid.c
+++ b/drivers/hid/amd-sfh-hid/amd_sfh_hid.c
@@ -171,11 +171,13 @@ int amdtp_hid_probe(u32 cur_hid_dev, struct amdtp_cl_data *cli_data)
void amdtp_hid_remove(struct amdtp_cl_data *cli_data)
{
int i;
+ struct amdtp_hid_data *hid_data;
for (i = 0; i < cli_data->num_hid_devices; ++i) {
if (cli_data->hid_sensor_hubs[i]) {
- kfree(cli_data->hid_sensor_hubs[i]->driver_data);
+ hid_data = cli_data->hid_sensor_hubs[i]->driver_data;
hid_destroy_device(cli_data->hid_sensor_hubs[i]);
+ kfree(hid_data);
cli_data->hid_sensor_hubs[i] = NULL;
}
}
--
2.43.0
next prev parent reply other threads:[~2024-09-10 9:53 UTC|newest]
Thread overview: 392+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-09-10 9:26 [PATCH 6.10 000/375] 6.10.10-rc1 review Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 001/375] libfs: fix get_stashed_dentry() Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 002/375] sch/netem: fix use after free in netem_dequeue Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 003/375] xfs: xfs_finobt_count_blocks() walks the wrong btree Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 004/375] net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 005/375] net: microchip: vcap: Fix use-after-free error in kunit test Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 006/375] net: ethernet: ti: am65-cpsw: fix XDP_DROP, XDP_TX and XDP_REDIRECT Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 007/375] ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 008/375] KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 009/375] KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 010/375] KVM: SVM: Dont advertise Bus Lock Detect to guest if SVM support is missing Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 011/375] ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 012/375] ALSA: hda/realtek: add patch for internal mic in Lenovo V145 Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 013/375] ALSA: hda/realtek: Enable Mute Led for HP Victus 15-fb1xxx Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 014/375] ALSA: hda/realtek - Fix inactive headset mic jack for ASUS Vivobook 15 X1504VAP Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 015/375] ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 016/375] powerpc/qspinlock: Fix deadlock in MCS queue Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 017/375] smb: client: fix double put of @cfile in smb2_set_path_size() Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 018/375] ksmbd: unset the binding mark of a reused connection Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 019/375] ksmbd: Unlock on in ksmbd_tcp_set_interfaces() Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 020/375] ata: libata: Fix memory leak for error path in ata_host_alloc() Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 021/375] x86/tdx: Fix data leak in mmio_read() Greg Kroah-Hartman
2024-09-10 9:26 ` [PATCH 6.10 022/375] perf/x86/intel: Limit the period on Haswell Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 023/375] irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 024/375] irqchip/sifive-plic: Probe plic driver early for Allwinner D1 platform Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 025/375] x86/kaslr: Expose and use the end of the physical memory address space Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 026/375] rtmutex: Drop rt_mutex::wait_lock before scheduling Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 027/375] irqchip/riscv-aplic: Fix an IS_ERR() vs NULL bug in probe() Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 028/375] nvme-pci: Add sleep quirk for Samsung 990 Evo Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 029/375] rust: macros: provide correct provenance when constructing THIS_MODULE Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 030/375] Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 031/375] Bluetooth: MGMT: Ignore keys being loaded with invalid type Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 032/375] selftests: mm: fix build errors on armhf Greg Kroah-Hartman
2024-09-10 14:23 ` Jeff Xu
2024-09-10 15:44 ` Liam R. Howlett
2024-09-10 17:11 ` Jeff Xu
2024-09-10 9:27 ` [PATCH 6.10 033/375] mmc: core: apply SD quirks earlier during probe Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 034/375] mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 035/375] mmc: sdhci-of-aspeed: fix module autoloading Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 036/375] mmc: cqhci: Fix checking of CQHCI_HALT state Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 037/375] fuse: update stats for pages in dropped aux writeback list Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 038/375] fuse: disable the combination of passthrough and writeback cache Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 039/375] fuse: check aborted connection before adding requests to pending list for resending Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 040/375] fuse: use unsigned type for getxattr/listxattr size truncation Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 041/375] fuse: fix memory leak in fuse_create_open Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 042/375] fuse: clear PG_uptodate when using a stolen page Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 043/375] ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 044/375] riscv: misaligned: Restrict user access to kernel memory Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 045/375] parisc: Delay write-protection until mark_rodata_ro() call Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 046/375] clk: starfive: jh7110-sys: Add notifier for PLL0 clock Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 047/375] clk: qcom: clk-alpha-pll: Fix the pll post div mask Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 048/375] clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 049/375] clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 050/375] clk: qcom: clk-alpha-pll: Update set_rate for Zonda PLL Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 051/375] pinctrl: qcom: x1e80100: Bypass PDC wakeup parent for now Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 052/375] can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 053/375] mm: vmalloc: optimize vmap_lazy_nr arithmetic when purging each vmap_area Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 054/375] alloc_tag: fix allocation tag reporting when CONFIG_MODULES=n Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 055/375] codetag: debug: mark codetags for poisoned page as empty Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 056/375] maple_tree: remove rcu_read_lock() from mt_validate() Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 057/375] kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 058/375] mm: vmalloc: ensure vmap_block is initialised before adding to queue Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 059/375] mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 060/375] Revert "mm: skip CMA pages when they are not available" Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 061/375] spi: rockchip: Resolve unbalanced runtime PM / system PM handling Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 062/375] tracing/osnoise: Use a cpumask to know what threads are kthreads Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 063/375] tracing/timerlat: Only clear timer if a kthread exists Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 064/375] tracing: Avoid possible softlockup in tracing_iter_reset() Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 065/375] tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 066/375] userfaultfd: dont BUG_ON() if khugepaged yanks our page table Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 067/375] userfaultfd: fix checks for huge PMDs Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 068/375] fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 069/375] eventfs: Use list_del_rcu() for SRCU protected list variable Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 070/375] net: mana: Fix error handling in mana_create_txq/rxqs NAPI cleanup Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 071/375] net: mctp-serial: Fix missing escapes on transmit Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 072/375] x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 073/375] x86/apic: Make x2apic_disable() work correctly Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 074/375] Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs" Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 075/375] Revert "wifi: ath11k: restore country code during resume" Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 076/375] Revert "wifi: ath11k: support hibernation" Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 077/375] tcp_bpf: fix return value of tcp_bpf_sendmsg() Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 078/375] ila: call nf_unregister_net_hooks() sooner Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 079/375] sched: sch_cake: fix bulk flow accounting logic for host fairness Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 080/375] nilfs2: fix missing cleanup on rollforward recovery error Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 081/375] nilfs2: protect references to superblock parameters exposed in sysfs Greg Kroah-Hartman
2024-09-10 9:27 ` [PATCH 6.10 082/375] nilfs2: fix state management in error path of log writing function Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 083/375] btrfs: qgroup: dont use extent changeset when not needed Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 084/375] btrfs: zoned: handle broken write pointer on zones Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 085/375] drm/xe/gsc: Do not attempt to load the GSC multiple times Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 086/375] drm/panthor: flush FW AS caches in slow reset path Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 087/375] drm/panthor: Restrict high priorities on group_create Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 088/375] drm/imagination: Free pvr_vm_gpuva after unlink Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 089/375] drm/amdgpu: always allocate cleared VRAM for GEM allocations Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 090/375] drm/i915: Do not attempt to load the GSC multiple times Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 091/375] drm/amd/display: Lock DC and exit IPS when changing backlight Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 092/375] ALSA: hda/realtek: extend quirks for Clevo V5[46]0 Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 093/375] ALSA: control: Apply sanity check of input values for user elements Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 094/375] ALSA: hda: Add input value sanity checks to HDMI channel map controls Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 095/375] wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he() Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 096/375] wifi: ath12k: fix firmware crash due to invalid peer nss Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 097/375] smack: unix sockets: fix accept()ed socket label Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 098/375] drm/amd/display: Check UnboundedRequestEnableds value Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 099/375] cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 100/375] virt: sev-guest: Mark driver struct with __refdata to prevent section mismatch Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 101/375] bpf, verifier: Correct tail_call_reachable for bpf prog Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 102/375] ELF: fix kernel.randomize_va_space double read Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 103/375] accel/habanalabs/gaudi2: unsecure edma max outstanding register Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 104/375] irqchip/renesas-rzg2l: Reorder function calls in rzg2l_irqc_irq_disable() Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 105/375] irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 106/375] media: b2c2: flexcop-usb: fix flexcop_usb_memory_req Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 107/375] af_unix: Remove put_pid()/put_cred() in copy_peercred() Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 108/375] x86/kmsan: Fix hook for unaligned accesses Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 109/375] iommu: sun50i: clear bypass register Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 110/375] netfilter: nf_conncount: fix wrong variable type Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 111/375] gve: Add adminq mutex lock Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 112/375] wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 113/375] udf: Avoid excessive partition lengths Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 114/375] fs/ntfs3: One more reason to mark inode bad Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 115/375] riscv: kprobes: Use patch_text_nosync() for insn slots Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 116/375] media: vivid: fix wrong sizeimage value for mplane Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 117/375] leds: spi-byte: Call of_node_put() on error path Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 118/375] wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 119/375] wifi: rtw89: wow: prevent to send unexpected H2C during download Firmware Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 120/375] usb: uas: set host status byte on data completion error Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 121/375] usb: gadget: aspeed_udc: validate endpoint index for ast udc Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 122/375] drm/amdgpu: Fix register access violation Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 123/375] drm/amd/display: Run DC_LOG_DC after checking link->link_enc Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 124/375] drm/amd/display: Check HDCP returned status Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 125/375] drm/amd/display: Validate function returns Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 126/375] drm/amdgpu: add missing error handling in function amdgpu_gmc_flush_gpu_tlb_pasid Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 127/375] drm/amdgpu: Fix smatch static checker warning Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 128/375] drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 129/375] crypto: qat - initialize user_input.lock for rate_limiting Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 130/375] media: vivid: dont set HDMI TX controls if there are no HDMI outputs Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 131/375] vfio/spapr: Always clear TCEs before unsetting the window Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 132/375] fs: dont copy to userspace under namespace semaphore Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 133/375] fs: relax permissions for statmount() Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 134/375] powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 135/375] seccomp: release task filters when the task exits Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 136/375] ice: Check all ice_vsi_rebuild() errors in function Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 137/375] PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 138/375] Input: ili210x - use kvmalloc() to allocate buffer for firmware update Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 139/375] media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 140/375] pcmcia: Use resource_size function on resource object Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 141/375] drm/amd/display: Check denominator pbn_div before used Greg Kroah-Hartman
2024-09-10 9:28 ` [PATCH 6.10 142/375] drm/amd/display: Check denominator crb_pipes " Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 143/375] drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 144/375] drm/amdgpu: Correct register used to clear fault status Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 145/375] drm/amdgpu/display: handle gfx12 in amdgpu_dm_plane_format_mod_supported Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 146/375] can: bcm: Remove proc entry when dev is unregistered Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 147/375] can: m_can: Release irq on error in m_can_open Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 148/375] can: m_can: Reset coalescing during suspend/resume Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 149/375] can: m_can: Remove coalesing disable in isr during suspend Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 150/375] can: m_can: Remove m_can_rx_peripheral indirection Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 151/375] can: m_can: Do not cancel timer from within timer Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 152/375] can: m_can: disable_all_interrupts, not clear active_interrupts Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 153/375] can: m_can: Reset cached active_interrupts on start Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 154/375] can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 155/375] rust: kbuild: fix export of bss symbols Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 156/375] cifs: Fix lack of credit renegotiation on read retry Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 157/375] netfs, cifs: Fix handling of short DIO read Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 158/375] cifs: Fix copy offload to flush destination region Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 159/375] cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 160/375] igb: Fix not clearing TimeSync interrupts for 82580 Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 161/375] ice: Add netif_device_attach/detach into PF reset flow Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 162/375] platform/x86: dell-smbios: Fix error path in dell_smbios_init() Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 163/375] spi: intel: Add check devm_kasprintf() returned value Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 164/375] regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 165/375] can: kvaser_pciefd: Skip redundant NULL pointer check in ISR Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 166/375] can: kvaser_pciefd: Remove unnecessary comment Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 167/375] can: kvaser_pciefd: Rename board_irq to pci_irq Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 168/375] can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 169/375] can: kvaser_pciefd: Use a single write when releasing RX buffers Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 170/375] Bluetooth: qca: If memdump doesnt work, re-enable IBS Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 171/375] Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 172/375] Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 173/375] hwmon: ltc2991: fix register bits defines Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 174/375] scripts: fix gfp-translate after ___GFP_*_BITS conversion to an enum Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 175/375] igc: Unlock on error in igc_io_resume() Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 176/375] hwmon: (hp-wmi-sensors) Check if WMI event data exists Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 177/375] perf lock contention: Fix spinlock and rwlock accounting Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 178/375] net: ethernet: ti: am65-cpsw: Fix RX statistics for XDP_TX and XDP_REDIRECT Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 179/375] net: phy: Fix missing of_node_put() for leds Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 180/375] ptp: ocp: convert serial ports to array Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 181/375] ptp: ocp: adjust sysfs entries to expose tty information Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 182/375] ice: move netif_queue_set_napi to rtnl-protected sections Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 183/375] ice: protect XDP configuration with a mutex Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 184/375] ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 185/375] ice: remove ICE_CFG_BUSY locking from AF_XDP code Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 186/375] ice: do not bring the VSI up, if it was down before the XDP setup Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 187/375] usbnet: modern method to get random MAC Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 188/375] net: dqs: Do not use extern for unused dql_group Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 189/375] bpf, net: Fix a potential race in do_sock_getsockopt() Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 190/375] bpf: add check for invalid name in btf_name_valid_section() Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 191/375] bareudp: Fix device stats updates Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 192/375] fou: Fix null-ptr-deref in GRO Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 193/375] r8152: fix the firmware doesnt work Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 194/375] net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 195/375] net: xilinx: axienet: Fix race in axienet_stop Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 196/375] net: dsa: vsc73xx: fix possible subblocks range of CAPT block Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 197/375] selftests: net: enable bind tests Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 198/375] tools/net/ynl: fix cli.py --subscribe feature Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 199/375] xen: privcmd: Fix possible access to a freed kirqfd instance Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 200/375] firmware: cs_dsp: Dont allow writes to read-only controls Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 201/375] phy: zynqmp: Take the phy mutex in xlate Greg Kroah-Hartman
2024-09-10 9:29 ` [PATCH 6.10 202/375] ASoC: topology: Properly initialize soc_enum values Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 203/375] dm init: Handle minors larger than 255 Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 204/375] cxl/region: Fix a race condition in memory hotplug notifier Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 205/375] iommu/vt-d: Handle volatile descriptor status read Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 206/375] iommu/vt-d: Remove control over Execute-Requested requests Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 207/375] block: dont call bio_uninit from bio_endio Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 208/375] cgroup: Protect css->cgroup write under css_set_lock Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 209/375] um: line: always fill *error_out in setup_one_line() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 210/375] devres: Initialize an uninitialized struct member Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 211/375] pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 212/375] virtio_ring: fix KMSAN error for premapped mode Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 213/375] wifi: rtw88: usb: schedule rx work after everything is set up Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 214/375] scsi: ufs: core: Remove SCSI host only if added Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 215/375] scsi: pm80xx: Set phy->enable_completion only when we wait for it Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 216/375] scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 217/375] crypto: qat - fix unintentional re-enabling of error interrupts Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 218/375] tracing/kprobes: Add symbol counting check when module loads Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 219/375] hwmon: (adc128d818) Fix underflows seen when writing limit attributes Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 220/375] hwmon: (lm95234) " Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 221/375] hwmon: (nct6775-core) " Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 222/375] hwmon: (w83627ehf) " Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 223/375] ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 224/375] libbpf: Add NULL checks to bpf_object__{prev_map,next_map} Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 225/375] drm/amdgpu: Set no_hw_access when VF request full GPU fails Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 226/375] ext4: fix possible tid_t sequence overflows Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 227/375] jbd2: avoid mount failed when commit block is partial submitted Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 228/375] dma-mapping: benchmark: Dont starve others when doing the test Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 229/375] wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 230/375] perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 231/375] PCI: qcom: Override NO_SNOOP attribute for SA8775P RC Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 232/375] staging: vchiq_core: Bubble up wait_event_interruptible() return value Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 233/375] iommufd: Require drivers to supply the cache_invalidate_user ops Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 234/375] bpf: Remove tst_run from lwt_seg6local_prog_ops Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 235/375] watchdog: imx7ulp_wdt: keep already running watchdog enabled Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 236/375] drm/amdgpu: reject gang submit on reserved VMIDs Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 237/375] smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 238/375] fs/ntfs3: Check more cases when directory is corrupted Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 239/375] btrfs: slightly loosen the requirement for qgroup removal Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 240/375] btrfs: dont BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 241/375] btrfs: replace BUG_ON with ASSERT " Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 242/375] btrfs: clean up our handling of refs == 0 in snapshot delete Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 243/375] btrfs: handle errors from btrfs_dec_ref() properly Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 244/375] btrfs: replace BUG_ON() with error handling at update_ref_for_cow() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 245/375] btrfs: dont BUG_ON() when 0 reference count at btrfs_lookup_extent_info() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 246/375] ethtool: fail closed if we cant get max channel used in indirection tables Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 247/375] cxl/region: Verify target positions using the ordered target list Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 248/375] riscv: set trap vector earlier Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 249/375] PCI: Add missing bridge lock to pci_bus_lock() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 250/375] tcp: Dont drop SYN+ACK for simultaneous connect() Greg Kroah-Hartman
2024-09-10 10:51 ` Matthieu Baerts
2024-09-11 12:34 ` Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 251/375] Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 252/375] net: dpaa: avoid on-stack arrays of NR_CPUS elements Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 253/375] drm/amdgpu: add mutex to protect ras shared memory Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 254/375] LoongArch: Use correct API to map cmdline in relocate_kernel() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 255/375] regmap: maple: work around gcc-14.1 false-positive warning Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 256/375] s390/boot: Do not assume the decompressor range is reserved Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 257/375] cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 258/375] vfs: Fix potential circular locking through setxattr() and removexattr() Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 259/375] i3c: master: svc: resend target address when get NACK Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 260/375] i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 261/375] kselftests: dmabuf-heaps: Ensure the driver name is null-terminated Greg Kroah-Hartman
2024-09-10 9:30 ` [PATCH 6.10 262/375] spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 263/375] btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 264/375] s390/vmlinux.lds.S: Move ro_after_init section behind rodata section Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 265/375] HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup Greg Kroah-Hartman
2024-09-10 9:31 ` Greg Kroah-Hartman [this message]
2024-09-10 9:31 ` [PATCH 6.10 267/375] Input: uinput - reject requests with unreasonable number of slots Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 268/375] usbnet: ipheth: race between ipheth_close and error handling Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 269/375] Squashfs: sanity check symbolic link size Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 270/375] of/irq: Prevent device address out-of-bounds read in interrupt map walk Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 271/375] lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 272/375] net: hns3: void array out of bound when loop tnl_num Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 273/375] kunit/overflow: Fix UB in overflow_allocation_test Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 274/375] MIPS: cevt-r4k: Dont call get_c0_compare_int if timer irq is installed Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 275/375] spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 276/375] ata: pata_macio: Use WARN instead of BUG Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 277/375] smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 278/375] NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 279/375] drm/amdgpu: Fix two reset triggered in a row Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 280/375] drm/amdgpu: Add reset_context flag for host FLR Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 281/375] drm/amdgpu: Fix amdgpu_device_reset_sriov retry logic Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 282/375] fs: only copy to userspace on success in listmount() Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 283/375] tcp: process the 3rd ACK with sk_socket for TFO/MPTCP Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 284/375] staging: iio: frequency: ad9834: Validate frequency parameter value Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 285/375] iio: buffer-dmaengine: fix releasing dma channel on error Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 286/375] iio: fix scale application in iio_convert_raw_to_processed_unlocked Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 287/375] iio: imu: inv_mpu6050: fix interrupt status read for old buggy chips Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 288/375] iio: adc: ad7124: fix config comparison Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 289/375] iio: adc: ad7606: remove frstdata check for serial mode Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 290/375] iio: adc: ad_sigma_delta: fix irq_flags on irq request Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 291/375] iio: adc: ad7124: fix chip ID mismatch Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 292/375] iio: adc: ad7124: fix DT configuration parsing Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 293/375] usb: dwc3: core: update LC timer as per USB Spec V3.2 Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 294/375] usb: cdns2: Fix controller reset issue Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 295/375] usb: dwc3: Avoid waking up gadget during startxfer Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 296/375] usb: typec: ucsi: Fix the partner PD revision Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 297/375] misc: fastrpc: Fix double free of buf in error path Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 298/375] binder: fix UAF caused by offsets overwrite Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 299/375] dt-bindings: nvmem: Use soc-nvmem node name instead of nvmem Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 300/375] nvmem: u-boot-env: error if NVMEM device is too small Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 301/375] nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 302/375] uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 303/375] Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 304/375] VMCI: Fix use-after-free when removing resource in vmci_resource_remove() Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 305/375] clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 306/375] clocksource/drivers/imx-tpm: Fix next event not taking effect sometime Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 307/375] clocksource/drivers/timer-of: Remove percpu irq related code Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 308/375] uprobes: Use kzalloc to allocate xol area Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 309/375] perf/aux: Fix AUX buffer serialization Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 310/375] mm: zswap: rename is_zswap_enabled() to zswap_is_enabled() Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 311/375] mm/memcontrol: respect zswap.writeback setting from parent cg too Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 312/375] workqueue: wq_watchdog_touch is always called with valid CPU Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 313/375] workqueue: Improve scalability of workqueue watchdog touch Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 314/375] path: add cleanup helper Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 315/375] fs: simplify error handling Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 316/375] fs: relax permissions for listmount() Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 317/375] ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 318/375] ACPI: processor: Fix memory leaks in error paths of processor_add() Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 319/375] arm64: acpi: Move get_cpu_for_acpi_id() to a header Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 320/375] arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 321/375] can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function Greg Kroah-Hartman
2024-09-10 9:31 ` [PATCH 6.10 322/375] can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 323/375] can: mcp251xfd: clarify the meaning of timestamp Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 324/375] can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 325/375] drm/amd: Add gfx12 swizzle mode defs Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 326/375] drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 327/375] ata: libata-scsi: Remove redundant sense_buffer memsets Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 328/375] ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 329/375] crypto: starfive - Align rsa input data to 32-bit Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 330/375] crypto: starfive - Fix nent assignment in rsa dec Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 331/375] hid: bpf: add BPF_JIT dependency Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 332/375] net/mlx5e: SHAMPO, Use KSMs instead of KLMs Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 333/375] net/mlx5e: SHAMPO, Fix page leak Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 334/375] drm/xe/xe2: Add workaround 14021402888 Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 335/375] drm/xe/xe2lpg: Extend " Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 336/375] clk: qcom: gcc-x1e80100: Fix USB 0 and 1 PHY GDSC pwrsts flags Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 337/375] clk: qcom: ipq9574: Update the alpha PLL type for GPLLs Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 338/375] powerpc/64e: remove unused IBM HTW code Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 339/375] powerpc/64e: split out nohash Book3E 64-bit code Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 340/375] powerpc/64e: Define mmu_pte_psize static Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 341/375] powerpc/vdso: Dont discard rela sections Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 342/375] ASoC: tegra: Fix CBB error during probe() Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 343/375] nvmet-tcp: fix kernel crash if commands allocation fails Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 344/375] nvme-pci: allocate tagset on reset if necessary Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 345/375] clk: qcom: gcc-x1e80100: Dont use parking clk_ops for QUPs Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 346/375] ASoc: SOF: topology: Clear SOF link platform name upon unload Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 347/375] riscv: selftests: Remove mmap hint address checks Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 348/375] riscv: mm: Do not restrict mmap address based on hint Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 349/375] ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 350/375] clk: qcom: gcc-sm8550: Dont use parking clk_ops for QUPs Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 351/375] clk: qcom: gcc-sm8550: Dont park the USB RCG at registration time Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 352/375] nouveau: fix the fwsec sb verification register Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 353/375] drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 354/375] drm/i915/fence: Mark debug_fence_free() " Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 355/375] gpio: rockchip: fix OF node leak in probe() Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 356/375] gpio: modepin: Enable module autoloading Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 357/375] smb: client: fix double put of @cfile in smb2_rename_path() Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 358/375] riscv: Fix toolchain vector detection Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 359/375] riscv: Do not restrict memory size because of linear mapping on nommu Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 360/375] riscv: Add tracepoints for SBI calls and returns Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 361/375] riscv: Improve sbi_ecall() code generation by reordering arguments Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 362/375] riscv: Fix RISCV_ALTERNATIVE_EARLY Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 363/375] cifs: Fix zero_point init on inode initialisation Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 364/375] cifs: Fix SMB1 readv/writev callback in the same way as SMB2/3 Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 365/375] nvme: rename nvme_sc_to_pr_err to nvme_status_to_pr_err Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 366/375] nvme: fix status magic numbers Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 367/375] nvme: rename CDR/MORE/DNR to NVME_STATUS_* Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 368/375] nvmet: Identify-Active Namespace ID List command should reject invalid nsid Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 369/375] ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 370/375] x86/mm: Fix PTI for i386 some more Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 371/375] drm/i915/display: Add mechanism to use sink model when applying quirk Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 372/375] drm/i915/display: Increase Fast Wake Sync length as a quirk Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 373/375] btrfs: fix race between direct IO write and fsync when using same fd Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 374/375] spi: spi-fsl-lpspi: Fix off-by-one in prescale max Greg Kroah-Hartman
2024-09-10 9:32 ` [PATCH 6.10 375/375] LoongArch: Use accessors to page table entries instead of direct dereference Greg Kroah-Hartman
2024-09-10 19:50 ` [PATCH 6.10 000/375] 6.10.10-rc1 review Christoph Biedl
2024-09-10 20:52 ` Florian Fainelli
2024-09-10 22:02 ` Mark Brown
2024-09-10 23:13 ` Shuah Khan
2024-09-11 9:46 ` Naresh Kamboju
2024-09-11 12:22 ` Christian Heusel
2024-09-11 19:31 ` Justin Forbes
2024-09-11 20:21 ` Pavel Machek
2024-09-12 0:12 ` Ron Economos
2024-09-12 7:18 ` Kexy Biscuit
2024-09-12 7:19 ` Jon Hunter
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20240910092631.485101024@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=Basavaraj.Natikar@amd.com \
--cc=jkosina@suse.com \
--cc=olivier@sobrie.be \
--cc=patches@lists.linux.dev \
--cc=sashal@kernel.org \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox