github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-10-05 19:34:02 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
31fe2cb511
linux/drivers
History
Chen Changcheng d3aba34427 HID: alps: fix use-after-free on input2 registration failure 
alps_input_configured() stores data->input2 before calling
input_register_device().  If registration fails, input_free_device()
frees the input device but data->input2 still points to the freed memory.
alps_input_configured() calls hid_hw_open() before allocating input2, so
URBs are already active and raw_event can fire during the failure window.
A U1_SP_ABSOLUTE_REPORT_ID report arriving then causes u1_raw_event()
to dereference the freed data->input2 -> use-after-free.

Fix by only storing input2 into drvdata after successful registration
and adding a NULL guard in the raw_event path.

Fixes: 2562756dde ("HID: add Alps I2C HID Touchpad-Stick support")
Cc: stable@vger.kernel.org
Signed-off-by: Chen Changcheng <chenchangcheng@kylinos.cn>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
2026-09-11 16:19:06 +02:00
..
accel accel/amdxdna: Skip unmapped range in aie2_populate_range() 2026-08-12 23:12:20 -07:00
accessibility
acpi x86/msr updates for v7.3: 2026-08-18 14:02:15 -07:00
amba
android Rust changes for v7.3 2026-08-18 11:25:09 -07:00
ata ata fixes for 7.2-rc7 2026-08-07 16:32:54 -07:00
atm atm: remove unused ATM PHY operations 2026-06-16 08:53:53 -07:00
auxdisplay Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
base regmap: Updates for v7.3 2026-08-19 09:32:57 -07:00
bcma
block Rust changes for v7.3 2026-08-18 11:25:09 -07:00
bluetooth Bluetooth: btusb: Fix short read errors in btusb_qca_send_vendor_req() 2026-07-28 16:13:48 -04:00
bus FSL SOC Changes for 7.3 2026-08-10 10:15:56 +02:00
cache Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
cdrom cdrom: fix stack out-of-bounds read in CDROMVOLCTRL 2026-07-20 21:54:52 -06:00
cdx Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
char vfs-7.3-rc1.kthread 2026-08-17 11:35:12 -07:00
clk pmdomain providers: 2026-08-19 09:28:46 -07:00
clocksource VDSO updates: 2026-08-18 16:56:25 -07:00
comedi comedi: comedi_parport: deal with premature interrupt 2026-07-17 14:50:35 +02:00
connector
counter Counter fixes for 7.2 2026-08-06 11:03:41 +02:00
cpufreq soc: devicetree updates for 7.3 2026-08-18 19:36:32 -07:00
cpuidle soc: qcom: Avoid SCM and SPM for cpuidle drivers 2026-07-11 10:01:51 -05:00
crypto vfs-7.3-rc1.kthread 2026-08-17 11:35:12 -07:00
cxl Merge branch 'for-7.2/cxl-type2-attach-region' into cxl-for-next 2026-06-12 13:47:53 -07:00
dax mm.git review status for mm-hotfixes-stable..mm-stable 2026-06-19 10:14:34 -07:00
dca
devfreq Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
dibs net/dibs: Correct freeing of dmb_clientid_arr 2026-08-12 17:08:05 -07:00
dio
dma dmaengine fixes for v7.2 2026-08-02 09:19:40 -07:00
dma-buf udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() 2026-07-10 16:26:39 -07:00
dpll dpll: use pin owner's dpll ref for pin-level attribute reporting 2026-07-24 16:15:19 -07:00
edac x86/msr updates for v7.3: 2026-08-18 14:02:15 -07:00
eisa
extcon Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
firewire - Get rid of static_cpu_has() - one less API to care about testing CPU 2026-08-18 19:09:42 -07:00
firmware chrome-platform-firmware: Updates for v7.3 2026-08-19 08:49:43 -07:00
fpga Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
fsi Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
fwctl
gnss
gpib gpio: legacy interface cleanups for 7.3 2026-07-27 09:56:49 +02:00
gpio gpio updates for v7.3-rc1 2026-08-19 09:10:07 -07:00
gpu soc: drivers for 7.3 2026-08-18 19:40:29 -07:00
greybus
hid HID: alps: fix use-after-free on input2 registration failure 2026-09-11 16:19:06 +02:00
hsi Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
hte Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
hv mshv_vtl: bounds-check cpu index in vtl mmap fault handler 2026-07-31 20:02:04 +00:00
hwmon hwmon updates for v7.3 2026-08-19 09:56:28 -07:00
hwspinlock
hwtracing intel_th: fix MSC output device reference leak 2026-07-17 14:52:08 +02:00
i2c i2c for v7.3 2026-08-19 09:23:13 -07:00
i3c i3c: mipi-i3c-hci: Use named initializers for platform_device_id's .driver_data 2026-06-16 23:19:45 +02:00
idle Merge branch 'intel-idle-lpi' 2026-08-07 21:22:50 +02:00
iio Linux 7.2 2026-08-18 14:21:04 +02:00
infiniband bnge/bng_re: fix ring ID widths 2026-07-23 10:24:12 -07:00
input hid-for-linus-2026081901 2026-08-19 10:00:31 -07:00
interconnect Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
iommu arm64 updates for 7.3 2026-08-18 11:57:17 -07:00
ipack
irqchip Interrupt chip driver updates: 2026-08-18 15:24:18 -07:00
leds Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
macintosh
mailbox Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
mcb
md - Get rid of static_cpu_has() - one less API to care about testing CPU 2026-08-18 19:09:42 -07:00
media media: iris: Guard the QCOM_UBWC_CONFIG select with QCOM_SMEM 2026-08-18 11:17:48 +02:00
memory Memory controller drivers for v7.3 2026-07-29 16:56:11 +02:00
memstick memstick: ms_block: reject a card that reports too many blocks 2026-07-06 17:09:30 +02:00
message
mfd gpio: legacy interface cleanups for 7.3 2026-07-27 09:56:49 +02:00
misc mei: pull kvfree out of spinlock 2026-07-31 13:28:05 +02:00
mmc mmc: loongson2: Fix sg iteration in data reorder functions 2026-08-04 15:39:11 +02:00
most
mtd Among the most important fixes that we have here, there are: 2026-07-17 09:30:17 -07:00
mux Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
net soc: drivers for 7.3 2026-08-18 19:40:29 -07:00
nfc Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
ntb NTB updates include an EPF bug fix to prevent an invalid unmap during 2026-06-28 07:46:12 -07:00
nubus
nvdimm Updates for the 7.2 release 2026-06-18 16:27:58 -07:00
nvme block-7.2-20260625 2026-06-25 09:56:47 -07:00
nvmem nvmem: layouts: Add fixed-layout driver 2026-07-31 11:00:13 +02:00
of pmdomain providers: 2026-08-19 09:28:46 -07:00
opp opp: Use clk_get_optional() to avoid leaving opp_table->clk as an error pointer 2026-08-06 11:54:14 +05:30
parisc
parport
pci Merge branch 'acpi-video' 2026-08-10 12:46:29 +02:00
pcmcia pcmcia: replace linux/gpio.h inclusions 2026-07-24 20:12:48 +02:00
peci
perf perf: arm_pmuv3: Zero initialize hw_id branch stack field 2026-08-07 11:55:16 +00:00
phy gpio updates for v7.3-rc1 2026-08-19 09:10:07 -07:00
pinctrl Linux 7.2 2026-08-18 14:21:04 +02:00
platform chrome-platform: Updates for v7.3 2026-08-19 08:27:06 -07:00
pmdomain pmdomain: Merge branch fixes into next 2026-08-12 11:12:00 +02:00
pnp Merge branches 'acpi-numa', 'acpi-misc' and 'pnp' 2026-08-07 20:01:31 +02:00
power power sequencing updates for v7.3-rc1 2026-08-19 09:08:06 -07:00
powercap x86/msr updates for v7.3: 2026-08-18 14:02:15 -07:00
pps Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
ps3
ptp ptp: ocp: Fix board ID over-read 2026-08-06 09:15:40 -07:00
pwm pwm: Changes for v7.3-rc1 2026-08-19 09:03:59 -07:00
rapidio mm.git review status for mm-hotfixes-stable..mm-nonmm-stable 2026-06-21 13:20:19 -07:00
ras x86/ras: Move contents from arch/x86/ras/Kconfig into drivers/ras/Kconfig 2026-07-01 18:40:09 -07:00
regulator regulator: Updates for v7.3 2026-08-19 09:36:58 -07:00
remoteproc
resctrl arm64 updates for 7.3 2026-08-18 11:57:17 -07:00
reset Reset controller fixes for v7.2 2026-07-10 14:15:39 +02:00
rpmsg rpmsg update for v7.2 2026-06-20 23:31:15 -07:00
rtc Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
s390 s390 updates for 7.2-rc7 2026-08-09 06:31:16 -07:00
sbus
scsi SCSI fixes on 20260812 2026-08-12 08:03:31 -07:00
sh
siox Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
slimbus
soc spi: Updates for v7.3 2026-08-19 09:47:41 -07:00
soundwire ASoC/soundwire: Intel: reset the PCMSyCM registers in hda_sdw_bpt_close 2026-07-31 13:23:10 +01:00
spi spi: Updates for v7.3 2026-08-19 09:47:41 -07:00
spmi Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
ssb
staging staging: rtl8723bs: validate monitor transmit frame lengths 2026-07-28 09:44:42 +02:00
target vfs-7.3-rc1.kthread 2026-08-17 11:35:12 -07:00
tc
tee soc: drivers for 7.3 2026-08-18 19:40:29 -07:00
thermal - Get rid of static_cpu_has() - one less API to care about testing CPU 2026-08-18 19:09:42 -07:00
thunderbolt thunderbolt: Initialize ->domain_released completion before it is being used 2026-07-30 06:47:32 +02:00
tty serial: amba-pl011: synchronize DMA teardown 2026-08-03 16:31:22 +02:00
ufs scsi: core: pair EH runtime PM get and put 2026-08-07 11:00:49 -04:00
uio uio_hv_generic: Bind to FCopy device by default 2026-07-17 14:50:09 +02:00
usb soc: drivers for 7.3 2026-08-18 19:40:29 -07:00
vdpa vdpa/mlx5: Fix buffer length in create_direct_keys() 2026-08-03 15:21:54 -04:00
vfio vfio/pci: Expose latched module parameter policy in debugfs 2026-06-29 14:26:31 -06:00
vhost vhost-scsi: reject feature changes after endpoint 2026-08-03 23:08:15 -04:00
video fbdev: bitblit: bound-check glyph index in bit_cursor() 2026-08-08 08:08:58 +02:00
virt arm64 updates for 7.3 2026-08-18 11:57:17 -07:00
virtio mm: page_reporting: allow driver to set batch capacity 2026-07-09 15:48:56 -07:00
w1 Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
watchdog watchdog updates for v7.3 2026-08-19 09:53:35 -07:00
xen xenbus: Unregister reboot notifier on init failure 2026-08-13 12:48:57 +02:00
zorro
Kconfig
Makefile