BackPup/Linux
1
0 Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-10-07 05:31:08 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
bb765d1c331f62b59049d35607ed2e365802bef9
Linux/drivers
T
History
Jann Horn bb765d1c33 tee: shm: fix use-after-free via temporarily dropped reference 
Bump the file's refcount before moving the reference into the fd table,
not afterwards. The old code could drop the file's refcount to zero for a
short moment before calling get_file() via get_dma_buf().

This code can only be triggered on ARM systems that use Linaro's OP-TEE.

Fixes: 967c9cca2c ("tee: generic TEE subsystem")
Signed-off-by: Jann Horn <[email protected]>
Signed-off-by: Jens Wiklander <[email protected]>
2018-05-07 11:50:25 +02:00
..
accessibility
…
acpi
Merge tag 'acpi-4.17-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2018-04-26 11:06:36 -07:00
amba
ARM: amba: Fix race condition with driver_override
2018-04-26 10:35:04 +02:00
android
ANDROID: binder: prevent transactions into own process.
2018-04-23 12:12:41 +02:00
ata
Merge branch 'for-4.17' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata
2018-04-03 17:42:25 -07:00
atm
atm: iphase: fix spelling mistake: "Tansmit" -> "Transmit"
2018-04-19 13:41:49 -04:00
auxdisplay
…
base
Merge tag 'driver-core-4.17-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core
2018-04-27 10:12:20 -07:00
bcma
…
block
Merge tag 'for-linus-20180425' of git://git.kernel.dk/linux-block
2018-04-25 21:05:15 -07:00
bluetooth
…
bus
HISI LPC: Add Kconfig MFD_CORE dependency
2018-04-26 16:53:23 +02:00
cdrom
cdrom: information leak in cdrom_ioctl_media_changed()
2018-04-18 08:21:32 -06:00
char
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2018-04-26 16:36:11 -07:00
clk
Merge tag 'meson-clk-fixes-4.17-1' of https://github.com/BayLibre/clk-meson into clk-fixes
2018-05-01 14:44:16 -07:00
clocksource
clocksource/imx-tpm: Correct -ETIME return condition check
2018-04-19 13:21:35 +02:00
connector
…
cpufreq
cpufreq / CPPC: Set platform specific transition_delay_us
2018-04-30 10:14:08 +02:00
cpuidle
cpuidle: menu: Avoid selecting shallow states with stopped tick
2018-04-09 11:54:57 +02:00
crypto
.gitignore: move *-asn1.[ch] patterns to the top-level .gitignore
2018-04-07 19:04:02 +09:00
dax
device-dax: allow MAP_SYNC to succeed
2018-04-19 15:11:50 -07:00
dca
…
devfreq
…
dio
…
dma
Merge tag 'dmaengine-4.17-rc1' of git://git.infradead.org/users/vkoul/slave-dma
2018-04-10 12:14:37 -07:00
dma-buf
…
edac
Merge tag 'edac_for_4.17' of git://git.kernel.org/pub/scm/linux/kernel/git/bp/bp
2018-04-05 14:21:13 -07:00
eisa
…
extcon
Merge tag 'char-misc-4.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2018-04-04 20:07:20 -07:00
firewire
…
firmware
firmware: arm_scmi: remove redundant null check on array
2018-04-16 10:15:58 +01:00
fmc
…
fpga
fpga-manager: altera-ps-spi: preserve nCONFIG state
2018-04-23 13:27:05 +02:00
fsi
…
gpio
Merge tag 'devicetree-for-4.17' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux
2018-04-05 21:03:42 -07:00
gpu
Merge branch 'vmwgfx-fixes-4.17' of git://people.freedesktop.org/~thomash/linux into drm-fixes
2018-05-04 10:03:27 +10:00
hid
HID: i2c-hid: fix inverted return value from i2c_hid_command()
2018-04-19 09:25:15 +02:00
hsi
…
hv
Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm
2018-04-09 11:42:31 -07:00
hwmon
hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics
2018-04-25 05:31:06 -07:00
hwspinlock
…
hwtracing
Merge tag 'char-misc-4.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2018-04-04 20:07:20 -07:00
i2c
i2c: sprd: Fix the i2c count issue
2018-04-27 14:12:43 +02:00
ide
Merge tag 'for-4.17/block-20180402' of git://git.kernel.dk/linux-block
2018-04-05 14:27:02 -07:00
idle
…
iio
Merge tag 'gpio-v4.17-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio
2018-04-05 09:51:41 -07:00
infiniband
Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma
2018-05-04 20:51:10 -10:00
input
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2018-05-02 17:34:42 -10:00
iommu
iommu: rockchip: fix building without CONFIG_OF
2018-05-03 16:36:07 +02:00
ipack
…
irqchip
irqchip/qcom: Fix check for spurious interrupts
2018-05-02 15:56:10 +02:00
isdn
mISDN: Remove VLAs
2018-04-12 21:46:10 -04:00
leds
…
lightnvm
…
macintosh
Merge tag 'powerpc-4.17-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
2018-04-07 12:08:19 -07:00
mailbox
…
mcb
…
md
bcache: use pr_info() to inform duplicated CACHE_SET_IO_DISABLE set
2018-05-03 08:35:16 -06:00
media
MAINTAINERS & files: Canonize the e-mails I use at files
2018-05-04 06:21:06 -04:00
memory
ARM: OMAP2+: Fix build when using split object directories
2018-04-18 10:07:13 -07:00
memstick
…
message
scsi: mptsas: Disable WRITE SAME
2018-04-18 23:37:25 -04:00
mfd
platform/chrome: mfd/cros_ec_dev: Add sysfs entry to set keyboard wake lid angle
2018-04-10 22:25:07 -07:00
misc
Merge tag 'for_linus-4.16' of git://git.kernel.org/pub/scm/linux/kernel/git/jwessel/kgdb
2018-04-12 10:21:19 -07:00
mmc
Merge tag 'mmc-v4.17-3' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc
2018-04-20 10:41:31 -07:00
mtd
mtd: rawnand: marvell: fix the chip-select DT parsing logic
2018-04-26 19:06:42 +02:00
mux
…
net
qed: fix spelling mistake: "offloded" -> "offloaded"
2018-05-03 14:45:51 -04:00
nfc
…
ntb
…
nubus
…
nvdimm
Revert "libnvdimm, of_pmem: workaround OF_NUMA=n build error"
2018-04-19 15:10:56 -07:00
nvme
Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma
2018-05-04 20:51:10 -10:00
nvmem
Merge tag 'char-misc-4.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2018-04-04 20:07:20 -07:00
of
earlycon: Use a pointer table to fix __earlycon_table stride
2018-04-23 10:06:59 +02:00
opp
…
oprofile
…
parisc
parisc: Fix section mismatches
2018-05-02 21:47:35 +02:00
parport
Merge tag 'char-misc-4.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2018-04-04 20:07:20 -07:00
pci
Merge tag 'pci-v4.17-fixes-1' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci
2018-04-26 16:28:24 -07:00
pcmcia
Merge branch 'for-linus-sa1100' of git://git.armlinux.org.uk/~rmk/linux-arm
2018-04-09 09:26:36 -07:00
perf
Merge tag 'armsoc-drivers' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
2018-04-05 21:29:35 -07:00
phy
Merge tag 'armsoc-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
2018-04-05 21:21:08 -07:00
pinctrl
Merge tag 'gpio-v4.17-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio
2018-04-05 09:51:41 -07:00
platform
platform/x86: Kconfig: Fix dell-laptop dependency chain.
2018-05-04 22:20:14 +02:00
pnp
…
power
Merge tag 'armsoc-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
2018-04-05 21:21:08 -07:00
powercap
…
pps
…
ps3
…
ptp
…
pwm
Merge tag 'pwm/for-4.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm
2018-04-13 15:46:21 -07:00
rapidio
rapidio: fix rio_dma_transfer error handling
2018-04-20 17:18:35 -07:00
ras
…
regulator
…
remoteproc
remoteproc: qcom: Fix potential device node leaks
2018-04-25 16:46:55 -07:00
reset
…
rpmsg
rpmsg: added MODULE_ALIAS for rpmsg_char
2018-04-25 16:46:55 -07:00
rtc
rtc: opal: Fix OPAL RTC driver OPAL_BUSY loops
2018-04-25 13:24:13 +10:00
s390
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux
2018-04-26 10:29:46 -07:00
sbus
sparc64: Fix mistake in oradax license text
2018-04-30 16:06:01 -04:00
scsi
scsi: isci: Fix infinite loop in while loop
2018-04-20 19:23:32 -04:00
sfi
…
sh
…
siox
…
slimbus
slimbus: Fix out-of-bounds access in slim_slicesize()
2018-04-23 13:40:15 +02:00
sn
…
soc
soc: bcm: raspberrypi-power: Fix use of __packed
2018-04-16 15:15:23 -07:00
soundwire
…
spi
…
spmi
…
ssb
…
staging
media: imx-media-csi: Fix inconsistent IS_ERR and PTR_ERR
2018-05-04 06:21:06 -04:00
target
scsi: target: Fix fortify_panic kernel exception
2018-04-20 19:24:01 -04:00
tc
…
tee
tee: shm: fix use-after-free via temporarily dropped reference
2018-05-07 11:50:25 +02:00
thermal
Merge branches 'thermal-core' and 'thermal-soc' into next
2018-04-13 14:11:53 +08:00
thunderbolt
…
tty
tty: Use __GFP_NOFAIL for tty_ldisc_get()
2018-04-25 15:03:44 +02:00
uio
uio_hv_generic: fix subchannel ring mmap
2018-04-23 12:43:48 +02:00
usb
Merge tag 'usb-serial-4.17-rc4' of https://git.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial into usb-linus
2018-05-04 14:38:32 -07:00
uwb
…
vfio
Merge tag 'vfio-v4.17-rc1' of git://github.com/awilliam/linux-vfio
2018-04-06 19:44:27 -07:00
vhost
vhost: return bool from *_access_ok() functions
2018-04-11 10:54:06 -04:00
video
Merge tag 'fbdev-v4.17' of git://github.com/bzolnier/linux
2018-04-10 10:20:00 -07:00
virt
virt: vbox: Log an error when we fail to get the host version
2018-04-23 13:41:55 +02:00
virtio
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2018-04-11 18:58:27 -07:00
visorbus
…
vlynq
…
vme
…
w1
…
watchdog
aspeed: watchdog: Set bootstatus during probe
2018-04-16 10:22:40 +02:00
xen
Merge tag 'for-linus-4.17-rc2-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip
2018-04-20 08:36:04 -07:00
zorro
…
Kconfig
…
Makefile
…