Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Jason Wang 81aca22428 vhost_net: validate sock before trying to put its fd ... commit b8f1f65882 upstream. Sock will be NULL if we pass -1 to vhost_net_set_backend(), but when we meet errors during ubuf allocation, the code does not check for NULL before calling sockfd_put(), this will lead NULL dereferencing. Fixing by checking sock pointer before. Fixes: bab632d69e ("vhost: vhost TX zero-copy support") Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Jason Wang <jasowang@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Ben Hutchings <ben@decadent.org.uk>		History 2018-11-20 18:05:25 +00:00
..
accessibility	printk: move braille console support into separate braille.[ch] files	2013-07-31 14:41:03 -07:00
acpi	ACPI / LPSS: Add missing prv_offset setting for byt/cht PWM devices	2018-11-20 18:05:11 +00:00
amba	ARM: SoC: driver changes	2014-04-05 15:37:40 -07:00
ata	libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk	2018-11-20 18:05:06 +00:00
atm	atm: zatm: Fix potential Spectre v1	2018-10-21 08:45:54 +01:00
auxdisplay	auxdisplay: ks0108: fix refcount	2015-09-28 10:21:35 +01:00
base	driver core: Don't ignore class_dir_create_and_add() failure.	2018-11-20 18:04:55 +00:00
bcma	bcma: use (get|put)_device when probing/removing device driver	2017-06-05 21:17:01 +01:00
block	floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl	2018-10-03 04:10:08 +01:00
bluetooth	Bluetooth: Add another AR3012 04ca:3018 device	2017-06-05 21:17:09 +01:00
bus	bus: mbus: fix window size calculation for 4GB windows	2018-01-01 20:51:52 +00:00
cdrom	cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status	2018-09-25 23:47:31 +01:00
char	tpm: fix race condition in tpm_common_write()	2018-11-20 18:05:05 +00:00
clk	clk: qcom: Base rcg parent rate off plan frequency	2018-11-20 18:04:52 +00:00
clocksource	clocksource/drivers/fsl_ftm_timer: Fix error return checking	2018-06-16 22:22:25 +01:00
connector	connector: bump skb->users before callback invocation	2016-01-28 10:14:29 +00:00
cpufreq	cpufreq: s3c24xx: Fix broken s3c_cpufreq_init()	2018-06-16 22:22:28 +01:00
cpuidle	cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()	2016-08-22 22:38:01 +01:00
crypto	crypto: s5p-sss - Fix kernel Oops in AES-ECB mode	2018-06-16 22:22:15 +01:00
dca	dca: convert to idr_alloc()	2013-02-27 19:10:15 -08:00
devfreq	PM / devfreq: Propagate error from devfreq_add_device()	2018-06-16 22:21:45 +01:00
dio	m68k: don't export static inline functions	2009-12-06 11:18:28 +01:00
dma	dmaengine: dmatest: fix container_of member in dmatest_callback	2018-03-03 15:52:35 +00:00
edac	EDAC, octeon: Fix an uninitialized variable warning	2018-06-16 22:21:40 +01:00
eisa	Revert "EISA: Initialize device before its resources"	2014-01-17 14:57:29 -07:00
extcon	extcon: palmas: Use devm_extcon_dev_allocate for extcon_dev	2014-04-29 09:52:12 +09:00
firewire	firewire: net: fix fragmented datagram_size off-by-one	2017-02-23 03:54:28 +00:00
firmware	firmware: dmi_scan: Fix handling of empty DMI strings	2018-06-16 22:22:06 +01:00
fmc	Merge 3.14-rc5 into char-misc-next	2014-03-02 19:53:09 -08:00
gpio	gpio: acpi: work around false-positive -Wstring-overflow warning	2018-01-01 20:51:33 +00:00
gpu	drm/i915: Disable LVDS on Radiant P845	2018-10-21 08:46:21 +01:00
hid	HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device	2018-10-21 08:45:19 +01:00
hsi	HSI: ssi_protocol: double free in ssip_pn_xmit()	2017-08-26 02:14:37 +01:00
hv	x86/retpoline/hyperv: Convert assembler indirect jumps	2018-03-19 18:59:07 +00:00
hwmon	hwmon: (nct6683) Enable EC access if disabled at boot	2018-10-21 08:45:38 +01:00
hwspinlock	A single patch from Vincent extending OMAP's hwspinlock support to OMAP5.	2013-05-07 14:01:27 -07:00
i2c	i2c: viperboard: return message count on master_xfer success	2018-10-21 08:46:10 +01:00
ide	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/ide	2014-07-21 22:44:24 -07:00
idle	intel_idle: fix IVT idle state table setting	2014-04-21 23:36:07 +02:00
iio	iio:kfifo_buf: check for uint overflow	2018-10-21 08:45:05 +01:00
infiniband	IB/isert: fix T10-pi check mask setting	2018-11-20 18:05:08 +00:00
input	Input: elantech - fix V4 report decoding for module with middle key	2018-11-20 18:05:23 +00:00
iommu	iommu/vt-d: Ratelimit each dmar fault printing	2018-11-20 18:04:50 +00:00
ipack	ipack: convert bus code to use dev_groups	2013-10-16 18:40:57 -07:00
irqchip	irqchip: brcmstb-l2: Define an irq_pm_shutdown function	2017-11-11 13:33:16 +00:00
isdn	mISDN: avoid arch specific __builtin_return_address call	2017-11-11 13:33:52 +00:00
leds	leds / PM: fix hibernation on arm when gpio-led used with CPU led trigger	2015-07-09 14:36:01 +01:00
lguest	x86: Clean up cr4 manipulation	2018-01-09 00:35:07 +00:00
macintosh	via-cuda: Use spinlock_irq_save/restore instead of enable/disable_irq	2018-10-03 04:10:07 +01:00
mailbox	drivers/mailbox/omap: make mbox->irq signed for error handling	2014-01-23 16:36:53 -08:00
mcb	mcb: Fixed bar number assignment for the gdd	2016-08-22 22:37:53 +01:00
md	bcache: don't attach backing with duplicate UUID	2018-06-16 22:22:32 +01:00
media	media: uvcvideo: Support realtek's UVC 1.5 device	2018-11-20 18:05:04 +00:00
memory	memory: mvebu-devbus: add a devbus, keep-config property	2014-04-29 13:17:10 +00:00
memstick	memstick: rtsx_usb_ms: Manage runtime PM when accessing the device	2017-02-23 03:54:16 +00:00
message	scsi: mptsas: Disable WRITE SAME	2018-10-21 08:45:31 +01:00
mfd	mfd: tps65911-comparator: Fix an off by one bug	2018-11-20 18:04:56 +00:00
misc	lkdtm: fix handle_irq_event symbol for INT_HW_IRQ_EN	2018-06-16 22:22:00 +01:00
mmc	mmc: jz4740: Fix race condition in IRQ mask update	2018-10-21 08:45:11 +01:00
mtd	mtd: cfi_cmdset_0002: Avoid walking all chips when unlocking.	2018-11-20 18:05:24 +00:00
net	xen-netfront: Update features after registering netdev	2018-11-20 18:05:22 +00:00
nfc	NFC: microread: Potential overflows in microread_target_discovered()	2014-10-05 13:41:05 -07:00
ntb	ntb: Use pci_enable_msix_range() instead of pci_enable_msix()	2014-04-07 10:59:20 -07:00
nubus	kernel/printk: use symbolic defines for console loglevels	2014-06-04 16:54:17 -07:00
of	of: platform: stop accessing invalid dev in of_platform_device_destroy	2018-11-20 18:05:09 +00:00
oprofile	oprofile, nmi-timer: Fix CPU hotplug callback registration	2014-03-20 13:43:46 +01:00
parisc	parisc: Hide Diva-built-in serial aux and graphics card	2018-03-03 15:52:00 +00:00
parport	parport_pc: Add support for WCH CH382L PCI-E single parallel port card.	2018-10-21 08:44:55 +01:00
pci	PCI: shpchp: Fix AMD POGO identification	2018-11-20 18:05:09 +00:00
pcmcia	Disable write buffering on Toshiba ToPIC95	2015-07-15 10:00:33 +01:00
phy	phy: sun4i-usb: Use spinlock to guard phyctl register access	2017-02-23 03:53:59 +00:00
pinctrl	pinctrl: samsung: Correct EINTG banks order	2018-11-20 18:04:48 +00:00
platform	eeepc-laptop: simplify parse_arg()	2018-11-20 18:04:45 +00:00
pnp	ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage	2015-07-15 10:01:34 +01:00
power	power: supply: ab8500_charger: Bail out in case of error in 'ab8500_charger_init_hw_registers()'	2018-06-16 22:21:41 +01:00
powercap	PowerCap: Fix an error code in powercap_register_zone()	2017-09-15 18:29:35 +01:00
pps	pps: do not crash when failed to register	2016-11-20 01:16:57 +00:00
ps3	ps3-vuart: don't use PREPARE_WORK	2014-03-07 10:24:48 -05:00
ptp	ptp: ptp_pch depends on x86_32	2014-06-17 15:43:48 -07:00
pwm	pwm: lpss: platform: Save/restore the ctrl register over a suspend/resume	2018-11-20 18:05:11 +00:00
rapidio	rapidio/tsi721_dma: fix failure to obtain transaction descriptor	2014-07-30 17:16:13 -07:00
regulator	regulator: max8998: Fix platform data retrieval.	2018-11-20 18:04:56 +00:00
remoteproc	remoteproc: avoid stack overflow in debugfs file	2016-01-05 12:08:23 +00:00
reset	reset: sunxi: fix spinlock initialization	2015-01-22 16:33:34 +00:00
rpmsg	A small pull request consisting of:	2013-05-07 14:02:00 -07:00
rtc	rtc: snvs: Fix usage of snvs_rtc_enable	2018-10-21 08:45:10 +01:00
s390	scsi: zfcp: fix missing REC trigger trace on enqueue without ERP thread	2018-11-20 18:04:58 +00:00
sbus	bbc-i2c: Fix BBC I2C envctrl on SunBlade 2000	2014-08-14 10:09:44 +08:00
scsi	scsi: qla2xxx: Fix setting lower transfer speed if GPSC fails	2018-11-20 18:05:10 +00:00
sfi	SFI / ACPI: Fix warnings reported during builds with W=1	2013-12-07 01:24:33 +01:00
sh	SH Driver Update for v3.16	2014-06-06 11:44:09 -07:00
sn	Drivers: misc: remove __dev* attributes.	2013-01-03 15:57:16 -08:00
soc	soc: qcom: fix of_device_id table	2014-05-26 21:27:09 +02:00
spi	spi: pxa2xx: check clk_prepare_enable() return value	2018-11-20 18:04:51 +00:00
spmi	spmi: Include OF based modalias in device uevent	2017-11-11 13:32:58 +00:00
ssb	ssb: Fix error routine when fallback SPROM fails	2017-03-16 02:26:23 +00:00
staging	staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy	2018-11-20 18:04:55 +00:00
target	scsi: target: Fix truncated PR-in ReadKeys response	2018-11-20 18:05:18 +00:00
tc	TC: Handle device_register() errors.	2014-06-26 10:48:23 +01:00
thermal	thermal: imx: Fix race condition in imx_thermal_probe()	2018-10-21 08:44:55 +01:00
tty	tty: pl011: Avoid spuriously stuck-off interrupts	2018-11-20 18:04:54 +00:00
uio	uio: fix incorrect memory leak cleanup	2017-09-15 18:29:40 +01:00
usb	USB: serial: cp210x: add CESINEL device ids	2018-11-20 18:05:16 +00:00
uwb	uwb: properly check kthread_run return value	2018-01-01 20:51:31 +00:00
vfio	vfio: New external user group/file match	2017-10-12 15:27:55 +01:00
vhost	vhost_net: validate sock before trying to put its fd	2018-11-20 18:05:25 +00:00
video	backlight: as3711_bl: Fix Device Tree node leaks	2018-11-20 18:05:13 +00:00
virt	drivers: clean-up prom.h implicit includes	2013-10-09 20:04:04 -05:00
virtio	virtio: release virtio index when fail to device_register	2018-03-03 15:51:42 +00:00
vlynq	drivers/vlynq/vlynq.c: fix another resource size off by 1 error	2014-01-23 16:36:55 -08:00
vme	vme: Fix wrong pointer utilization in ca91cx42_slave_get	2017-03-16 02:26:56 +00:00
w1	1wire: family module autoload fails because of upper/lower case mismatch.	2018-11-20 18:04:54 +00:00
watchdog	watchdog: f71808e_wdt: Fix WD_EN register read	2018-10-21 08:44:53 +01:00
xen	xen: Remove unnecessary BUG_ON from __unbind_from_irq()	2018-11-20 18:05:23 +00:00
zorro	zorro/UAPI: Use proper types (endianness/size) in <linux/zorro.h>	2013-11-26 11:09:09 +01:00
Kconfig	soc: Introduce drivers/soc place-holder for SOC specific drivers	2014-05-23 11:37:46 -05:00
Makefile	usb: Make sure usb/phy/of gets built-in	2017-08-26 02:14:39 +01:00