linux/drivers/iio
Nuno Sa 6e4d236d9c iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
[ Upstream commit 3a4187ec45 ]

The AD7923 was updated to support devices with 8 channels, but the size
of tx_buf and ring_xfer was not increased accordingly, leading to a
potential buffer overflow in ad7923_update_scan_mode().

Fixes: 851644a60d ("iio: adc: ad7923: Add support for the ad7908/ad7918/ad7928")
Cc: stable@vger.kernel.org
Signed-off-by: Nuno Sa <nuno.sa@analog.com>
Signed-off-by: Zicheng Qu <quzicheng@huawei.com>
Link: https://patch.msgid.link/20241029134637.2261336-1-quzicheng@huawei.com
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
[ Context change fixed. ]
Signed-off-by: Robert Garcia <rob_garcia@163.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
History 2026-04-18 10:33:36 +02:00
..
accel iio: Use IRQF_NO_THREAD 2026-03-04 07:20:17 -05:00
adc iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer 2026-04-18 10:33:36 +02:00
addac iio: addac: stx104: Fix race condition when converting analog-to-digital 2023-08-26 14:23:27 +02:00
afe iio: afe: rescale: Accept only offset channels 2023-11-08 17:26:42 +01:00
amplifiers iio: amplifiers: hmc425a: Simplify with dev_err_probe() 2020-09-03 19:40:50 +01:00
buffer iio: buffer-dmaengine: fix releasing dma channel on error 2024-09-12 11:07:50 +02:00
cdc iio:cdc:ad7150: Fix use of uninitialized ret 2021-04-07 08:36:39 +01:00
chemical iio: chemical: bme680: Fix measurement wait duration calculation 2026-04-18 10:33:16 +02:00
common iio:common:ssp_sensors: Fix an error handling path ssp_probe() 2025-12-07 06:09:34 +09:00
dac iio: dac: ad5770r: fix error return in ad5770r_read_raw() 2026-04-18 10:33:32 +02:00
dummy iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer 2025-01-23 17:15:54 +01:00
frequency iio: frequency: adf4350: Fix prescaler usage. 2025-10-19 16:21:45 +02:00
gyro iio: gyro: mpu3050: Fix out-of-sequence free_irq() 2026-04-18 10:33:33 +02:00
health iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw 2022-12-08 11:28:38 +01:00
humidity iio:humidity:hts221: rearrange iio trigger get and register 2022-06-29 09:03:27 +02:00
imu iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only 2026-04-18 10:33:32 +02:00
light iio: light: vcnl4035: fix scan buffer on big-endian 2026-04-18 10:33:32 +02:00
magnetometer iio: magnetometer: Remove IRQF_ONESHOT 2026-03-04 07:20:17 -05:00
multiplexer iio: multiplexer: iio-mux: Simplify with dev_err_probe() 2020-09-03 19:40:51 +01:00
orientation iio: hid-sensors: bind IIO channels alloc to device object 2021-07-13 18:21:53 +01:00
position iio: hid-sensors: Update header includes 2021-06-16 14:53:13 +01:00
potentiometer iio: potentiometer: mcp4131: fix double application of wiper shift 2026-04-18 10:33:16 +02:00
potentiostat iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() 2021-05-17 13:54:30 +01:00
pressure iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() 2025-08-28 16:24:35 +02:00
proximity iio: proximity: isl29501: fix buffered read on big-endian systems 2025-08-28 16:24:35 +02:00
resolver iio:resolver:ad2s1200: Drop of_match_ptr protection 2020-09-21 18:41:31 +01:00
temperature iio: temperature: ltc2983: make bulk write buffer DMA-safe 2022-12-31 13:14:29 +01:00
test iio/test-format: build kunit tests without structleak plugin 2021-10-06 17:53:36 -06:00
trigger iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() 2022-11-26 09:24:46 +01:00
iio_core.h iio: buffer: fix use-after-free for attached_buffers array 2021-03-25 19:13:51 +00:00
iio_core_trigger.h iio: core-trigger: make iio_device_register_trigger_consumer() an int return 2021-03-11 20:47:02 +00:00
industrialio-buffer.c iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL 2022-02-16 12:56:37 +01:00
industrialio-configfs.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 2019-06-19 17:09:55 +02:00
industrialio-core.c driver: iio: add missing checks on iio_info's callback access 2026-04-18 10:33:17 +02:00
industrialio-event.c driver: iio: add missing checks on iio_info's callback access 2026-04-18 10:33:17 +02:00
industrialio-sw-device.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 2019-06-19 17:09:55 +02:00
industrialio-sw-trigger.c iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails 2022-12-02 17:41:08 +01:00
industrialio-trigger.c iio: trigger: Fix a scheduling whilst atomic issue seen on tsc2046 2022-01-27 11:02:57 +01:00
industrialio-triggered-event.c iio: core: move @id from struct iio_dev to struct iio_dev_opaque 2021-05-17 13:49:13 +01:00
inkern.c driver: iio: add missing checks on iio_info's callback access 2026-04-18 10:33:17 +02:00
Kconfig iio: add addac subdirectory 2023-08-26 14:23:26 +02:00
Makefile iio: add addac subdirectory 2023-08-26 14:23:26 +02:00
TODO iio: add a TODO 2020-03-08 17:28:53 +00:00