github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-09-14 16:10:02 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
da1ea35fea
linux/drivers/usb/misc
History
Jiangshan Yi 7e22c9f79b usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg 
ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check
in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT
endpoint size.  Both are taken independently from different endpoints
in usbio_probe(), so the check is wrong when they differ.

Use rxbuf_len for the IN direction.  This matches the buffer that
actually holds the response data.

Fixes: 121a0f839d ("usb: misc: Add Intel USBIO bridge driver")
Cc: stable <stable@kernel.org>
Signed-off-by: Jiangshan Yi <yijiangshan@kylinos.cn>
Tested-by: Antti Laakso <antti.laakso@linux.intel.com>
Link: https://patch.msgid.link/20260722101810.458634-1-yijiangshan@kylinos.cn
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2026-08-03 17:23:54 +02:00
..
sisusbvga Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
adutux.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
apple-mfi-fastcharge.c USB: apple-mfi-fastcharge: drop redundant device reference 2026-03-18 15:51:44 +01:00
appledisplay.c usb: misc: appledisplay: use HID includes 2026-03-30 16:47:26 +02:00
brcmstb-usb-pinmap.c usb: misc: brcmstb-usb-pinmap: fix module autoloading 2024-08-25 13:45:56 +02:00
chaoskey.c USB: chaoskey: Fix slab-use-after-free in chaoskey_release() 2026-07-08 16:29:16 +02:00
cypress_cy7c63.c USB: cypress_cy7c63: drop redundant device reference 2026-03-11 15:14:35 +01:00
cytherm.c USB: cytherm: drop redundant device reference 2026-03-11 15:14:35 +01:00
ehset.c usb: misc: ehset: fix wrong if condition 2023-07-27 10:37:30 +02:00
emi26.c USB: misc: Remove redundant license text 2017-11-04 11:55:38 +01:00
emi62.c USB: misc: Remove redundant license text 2017-11-04 11:55:38 +01:00
ezusb.c usb: misc: add missing MODULE_DESCRIPTION() macros 2024-06-20 19:18:24 +02:00
idmouse.c USB: idmouse: fix use-after-free on disconnect race 2026-06-25 15:14:52 +01:00
iowarrior.c USB: iowarrior: fix use-after-free on disconnect race 2026-06-25 15:14:48 +01:00
isight_firmware.c usb: misc: add missing MODULE_DESCRIPTION() macros 2024-06-20 19:18:24 +02:00
Kconfig USB: qcom: Unify user-visible "Qualcomm" name 2026-04-27 10:18:01 -06:00
ldusb.c USB: ldusb: fix use-after-free on disconnect race 2026-06-25 15:14:57 +01:00
legousbtower.c USB: legousbtower: fix use-after-free on disconnect race 2026-06-25 15:15:03 +01:00
lvstest.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
Makefile usb: misc: Add Intel USBIO bridge driver 2025-09-12 14:05:09 +02:00
onboard_usb_dev_pdevs.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
onboard_usb_dev.c usb: misc: onboard_usb_hub: Add Genesys Logic GL3590 hub support 2026-04-27 05:14:17 -06:00
onboard_usb_dev.h usb: misc: onboard_usb_hub: Add Genesys Logic GL3590 hub support 2026-04-27 05:14:17 -06:00
qcom_eud.c usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls 2025-08-13 17:13:45 +02:00
trancevibrator.c USB: trancevibrator: drop redundant device reference 2026-03-11 15:14:35 +01:00
usb-ljca.c Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
usb251xb.c usb: misc: Use named initializers for struct i2c_device_id 2026-05-21 16:52:34 +02:00
usb3503.c usb: misc: Use named initializers for struct i2c_device_id 2026-05-21 16:52:34 +02:00
usb4604.c usb: misc: Use named initializers for struct i2c_device_id 2026-05-21 16:52:34 +02:00
usbio.c usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg 2026-08-03 17:23:54 +02:00
usblcd.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
usbsevseg.c USB: usbsevseg: drop redundant device reference 2026-03-11 15:14:35 +01:00
usbtest.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
uss720.c USB: misc: uss720: unregister parport on probe failure 2026-07-08 13:33:03 +02:00
yurex.c usb: yurex: fix race in probe 2026-02-23 20:25:07 +01:00