Shreeya Patel 7e88a50704 gpio: Restrict usage of GPIO chip irq members before initialization ... commit 5467801f1f upstream. GPIO chip irq members are exposed before they could be completely initialized and this leads to race conditions. One such issue was observed for the gc->irq.domain variable which was accessed through the I2C interface in gpiochip_to_irq() before it could be initialized by gpiochip_add_irqchip(). This resulted in Kernel NULL pointer dereference. Following are the logs for reference :- kernel: Call Trace: kernel: gpiod_to_irq+0x53/0x70 kernel: acpi_dev_gpio_irq_get_by+0x113/0x1f0 kernel: i2c_acpi_get_irq+0xc0/0xd0 kernel: i2c_device_probe+0x28a/0x2a0 kernel: really_probe+0xf2/0x460 kernel: RIP: 0010:gpiochip_to_irq+0x47/0xc0 To avoid such scenarios, restrict usage of GPIO chip irq members before they are completely initialized. Signed-off-by: Shreeya Patel <shreeya.patel@collabora.com> Cc: stable@vger.kernel.org Reviewed-by: Andy Shevchenko <andy.shevchenko@gmail.com> Reviewed-by: Linus Walleij <linus.walleij@linaro.org> Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-04-13 21:01:09 +02:00
..
acpi	ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions	2022-01-27 10:54:18 +01:00
asm-generic	vmlinux.lds.h: Handle clang's module.{c,d}tor sections	2021-08-18 08:59:18 +02:00
clocksource	clocksource/drivers/timer-ti-dm: Save and restore timer TIOCP_CFG	2021-07-14 16:56:12 +02:00
crypto	crypto: public_key: fix overflow during implicit conversion	2021-09-18 13:40:08 +02:00
drm	drm: protect drm_master pointers in drm_lease.c	2021-09-18 13:40:19 +02:00
dt-bindings	clk: imx8mq: remove SYS PLL 1/2 clock gates	2021-07-14 16:56:20 +02:00
keys	certs: Add EFI_CERT_X509_GUID support for dbx entries	2021-06-30 08:47:30 -04:00
kunit	kunit: fix display of failed expectations for strings	2020-11-10 13:45:15 -07:00
kvm	ARM:	2020-10-23 11:17:56 -07:00
linux	gpio: Restrict usage of GPIO chip irq members before initialization	2022-04-13 21:01:09 +02:00
math-emu
media	media: subdev: disallow ioctl for saa6588/davinci	2021-07-19 09:45:02 +02:00
memory	memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode	2021-11-18 14:03:47 +01:00
misc
net	Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg}	2022-04-13 21:00:59 +02:00
pcmcia
ras	mm,hwpoison: introduce MF_MSG_UNSPLIT_THP	2020-10-16 11:11:17 -07:00
rdma	RDMA/netlink: Add __maybe_unused to static inline in C file	2021-11-26 10:39:21 +01:00
scsi	scsi: iscsi: Fix conn use after free during resets	2021-07-20 16:05:41 +02:00
soc	firmware: raspberrypi: Keep count of all consumers	2021-09-15 09:50:41 +02:00
sound	ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock	2022-04-08 14:39:53 +02:00
target	scsi: target: Fix ordered tag handling	2021-11-26 10:39:11 +01:00
trace	rxrpc: Fix call timer start racing with call destruction	2022-04-08 14:40:41 +02:00
uapi	can: isotp: set default value for N_As to 50 micro seconds	2022-04-13 21:01:00 +02:00
vdso
video	gpu: ipu-v3: remove unused functions	2020-10-26 10:42:38 +01:00
xen	xen/gnttab: fix gnttab_end_foreign_access() without page specified	2022-03-11 12:11:54 +01:00