Shin'ichiro Kawasaki 928ea98252 bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() ... In fsl_mc_bus_remove(), mc->root_mc_bus_dev->mc_io is passed to fsl_destroy_mc_io(). However, mc->root_mc_bus_dev is already freed in fsl_mc_device_remove(). Then reference to mc->root_mc_bus_dev->mc_io triggers KASAN use-after-free. To avoid the use-after-free, keep the reference to mc->root_mc_bus_dev->mc_io in a local variable and pass to fsl_destroy_mc_io(). This patch needs rework to apply to kernels older than v5.15. Fixes: f93627146f ("staging: fsl-mc: fix asymmetry in destroy of mc_io") Cc: stable@vger.kernel.org # v5.15+ Signed-off-by: Shin'ichiro Kawasaki <shinichiro.kawasaki@wdc.com> Link: https://lore.kernel.org/r/20220601105159.87752-1-shinichiro.kawasaki@wdc.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-06-10 15:53:12 +02:00
..
fsl-mc	bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()	2022-06-10 15:53:12 +02:00
mhi	MHI changes for v5.19	2022-05-19 16:55:13 +02:00
Kconfig	bus: add driver for initializing the SSC bus on (some) qcom SoCs	2022-04-19 13:03:57 -05:00
Makefile	bus: add driver for initializing the SSC bus on (some) qcom SoCs	2022-04-19 13:03:57 -05:00
arm-cci.c	bus: arm-cci: remove unnecessary unreachable()	2018-05-14 01:22:49 -07:00
arm-integrator-lm.c	bus: arm-integrator-lm: Add of_node_put() before return statement	2021-01-15 17:53:05 +01:00
brcmstb_gisb.c	bus: brcmstb_gisb: Remove the suppress_bind_attrs attribute of the driver	2022-04-26 09:12:45 -07:00
bt1-apb.c	bus: bt1-apb: Use sysfs_streq instead of strncmp	2020-05-28 16:56:56 +02:00
bt1-axi.c	bus: bt1-axi: Use sysfs_streq instead of strncmp	2020-05-28 16:57:12 +02:00
da8xx-mstpri.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
hisi_lpc.c	bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal	2020-02-28 17:30:49 +08:00
imx-weim.c	bus: imx-weim: make symbol 'weim_of_notifier' static	2022-04-11 16:04:53 +08:00
intel-ixp4xx-eb.c	bus: ixp4xx: return on error in ixp4xx_exp_probe()	2021-08-12 22:34:13 +02:00
mips_cdmm.c	mips: cdmm: Fix refcount leak in mips_cdmm_phys_base	2022-03-14 15:01:51 +01:00
moxtet.c	spi: make remove callback a void function	2022-02-09 13:00:45 +00:00
mvebu-mbus.c	bus: mvebu-mbus: Export symbols for public API window functions	2022-01-06 13:37:47 +00:00
omap-ocp2scp.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157	2019-05-30 11:26:37 -07:00
omap_l3_noc.c	bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD	2021-02-04 09:08:57 +02:00
omap_l3_noc.h	…
omap_l3_smx.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
omap_l3_smx.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
qcom-ebi2.c	bus: qcom-ebi2: Fix incorrect documentation for '{slow,fast}_cfg'	2021-05-26 21:19:23 -05:00
qcom-ssc-block-bus.c	bus: add driver for initializing the SSC bus on (some) qcom SoCs	2022-04-19 13:03:57 -05:00
simple-pm-bus.c	drivers: bus: simple-pm-bus: Add support for probing simple bus only devices	2021-10-05 17:47:15 +02:00
sun50i-de2.c	bus: sun50i-de2: Adjust printing error message	2021-10-13 14:48:48 +02:00
sunxi-rsb.c	bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()	2022-04-25 19:29:04 +02:00
tegra-aconnect.c	bus: tegra-aconnect: add system sleep callbacks	2019-03-28 17:26:14 +01:00
tegra-gmi.c	bus: tegra-gmi: Add runtime PM and OPP support	2021-12-16 14:05:23 +01:00
ti-pwmss.c	bus/ti-pwmss: move TI PWMSS driver from PWM to bus subsystem	2019-10-17 21:17:42 +01:00
ti-sysc.c	Char / Misc / Other smaller driver subsystem updates for 5.19-rc1	2022-06-03 11:36:34 -07:00
ts-nbus.c	gpiolib: Pass array info to get/set array functions	2018-09-13 11:16:54 +02:00
uniphier-system-bus.c	bus: uniphier-system-bus: use devm_platform_ioremap_resource()	2019-09-05 17:57:18 +02:00
vexpress-config.c	bus: vexpress-config: Support building as module	2020-05-13 12:42:46 -05:00