mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-08-27 22:13:55 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
094dc1619cb025b6fedbe609d09d3768cf645ab4
linux/drivers
History
Linmao Li 8e4f5ca8bf wifi: nxpwifi: reject zero-length extension elements in beacon IEs 
nxpwifi_update_bss_desc_with_ie() dispatches on elem->data[0] for
WLAN_EID_EXTENSION without checking that the element has a payload.
A well-formed extension element carries at least the element ID
extension byte, but nothing enforces that in the IE stream, and the
loop accepts a zero-length element because its header alone fits.
elem->data[0] then reads the byte after the element, which is past the
kmemdup()ed IE buffer when that element ends the stream.

Fixes: 73b01e57ed ("wifi: nxp: add nxpwifi driver for IW61x")
Signed-off-by: Linmao Li <lilinmao@kylinos.cn>
Link: https://patch.msgid.link/20260724103656.2494129-1-lilinmao@kylinos.cn
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
2026-07-28 16:00:40 +02:00
..
accel
accel/amdxdna: Fix use-after-free of mm_struct in job scheduler
2026-07-16 20:05:28 -07:00
accessibility
…
acpi
Merge tag 'acpi-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2026-07-03 15:13:50 -10:00
amba
…
android
rust_binder: clear freeze listener on node removal
2026-07-03 13:54:10 +02:00
ata
Merge tag 'ata-7.2-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux
2026-07-17 17:58:57 -07:00
atm
atm: remove unused ATM PHY operations
2026-06-16 08:53:53 -07:00
auxdisplay
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
base
Merge tag 'regmap-fix-v7.2-merge-window' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap
2026-06-26 10:47:26 -07:00
bcma
…
block
Merge tag 'block-7.2-20260717' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux
2026-07-19 09:29:42 -07:00
bluetooth
Bluetooth: btusb: validate Realtek vendor event length
2026-07-20 17:41:28 -04:00
bus
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
cache
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
cdrom
…
cdx
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
char
tpm: Make the TPM character devices non-seekable
2026-07-12 12:52:34 -07:00
clk
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
clocksource
Merge tag 'timers-vdso-2026-06-13' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip
2026-06-15 13:57:13 +05:30
comedi
…
connector
…
counter
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
cpufreq
cpufreq: Make cpufreq_update_pressure() fall back to cpuinfo.max_freq
2026-07-09 20:31:57 +02:00
cpuidle
cpuidle: Allow exit latency to exceed target residency
2026-06-23 14:00:29 +02:00
crypto
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
cxl
cxl: Support dpa without a mailbox
2026-06-29 10:55:47 -07:00
dax
Merge tag 'mm-stable-2026-06-18-09-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2026-06-19 10:14:34 -07:00
dca
…
devfreq
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
dibs
dibs: loopback: validate offset and size in move_data()
2026-07-09 12:44:00 +02:00
dio
…
dma
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
dma-buf
udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()
2026-07-10 16:26:39 -07:00
dpll
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-07-20 09:18:11 +02:00
edac
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
eisa
…
extcon
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
firewire
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
firmware
Merge tag 'wireless-2026-07-26' of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next
2026-07-27 16:03:40 -07:00
fpga
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
fsi
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
fwctl
…
gnss
…
gpib
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
gpio
gpio: mvebu: free generic chips on unbind
2026-07-08 14:05:11 +02:00
gpu
Merge tag 'drm-fixes-2026-07-18-1' of https://gitlab.freedesktop.org/drm/kernel
2026-07-17 16:56:55 -07:00
greybus
…
hid
Merge tag 'char-misc-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2026-07-12 12:37:28 -07:00
hsi
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
hte
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
hv
Merge tag 'hyperv-next-signed-20260621' of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux
2026-06-22 08:06:13 -07:00
hwmon
hwmon: occ: validate poll response sensor blocks
2026-07-20 07:29:44 -07:00
hwspinlock
hwspinlock: qcom: avoid uninitialized struct members
2026-06-08 21:51:12 -05:00
hwtracing
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
i2c
i2c: mediatek: fix WRRD for SoCs without auto_restart option
2026-07-15 00:21:51 +02:00
i3c
i3c: mipi-i3c-hci: Use named initializers for platform_device_id's .driver_data
2026-06-16 23:19:45 +02:00
idle
Merge tag 'x86-msr-2026-06-14' of gitolite.kernel.org:pub/scm/linux/kernel/git/tip/tip
2026-06-15 15:08:14 +05:30
iio
Merge tag 'char-misc-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2026-07-12 12:37:28 -07:00
infiniband
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-07-23 14:07:40 -07:00
input
Merge tag 'input-for-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2026-07-11 15:42:55 -07:00
interconnect
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
iommu
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
ipack
…
irqchip
Merge tag 'irq-urgent-2026-07-05' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-07-05 05:29:41 -10:00
leds
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
macintosh
…
mailbox
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
mcb
…
md
dm thin metadata: fix superblock refcount leak on snapshot shadow failure
2026-07-11 15:18:51 +02:00
media
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
memory
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
memstick
memstick: ms_block: reject a card that reports too many blocks
2026-07-06 17:09:30 +02:00
message
…
mfd
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
misc
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
mmc
Merge tag 'wireless-2026-07-26' of https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next
2026-07-27 16:03:40 -07:00
most
…
mtd
Merge tag 'mtd/fixes-for-7.2-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux
2026-07-17 09:30:17 -07:00
mux
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
net
wifi: nxpwifi: reject zero-length extension elements in beacon IEs
2026-07-28 16:00:40 +02:00
nfc
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
ntb
Merge tag 'ntb-7.2' of https://github.com/jonmason/ntb
2026-06-28 07:46:12 -07:00
nubus
…
nvdimm
Merge tag 'libnvdimm-for-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm
2026-06-18 16:27:58 -07:00
nvme
Merge tag 'block-7.2-20260625' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux
2026-06-25 09:56:47 -07:00
nvmem
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
of
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
opp
…
parisc
…
parport
…
pci
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
pcmcia
…
peci
…
perf
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
phy
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
pinctrl
Merge tag 'gpio-fixes-for-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux
2026-07-03 05:38:12 -10:00
platform
Merge tag 'platform-drivers-x86-v7.2-3' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86
2026-07-22 10:36:10 -07:00
pmdomain
pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check
2026-07-13 12:42:17 +02:00
pnp
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
power
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
powercap
…
pps
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
ps3
…
ptp
ptp: netc: explicitly clear TMR_OFF during initialization
2026-07-23 09:16:14 -07:00
pwm
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
rapidio
Merge tag 'mm-nonmm-stable-2026-06-21-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2026-06-21 13:20:19 -07:00
ras
Merge tag 'edac_updates_for_v7.2_rc1' of gitolite.kernel.org:pub/scm/linux/kernel/git/ras/ras
2026-06-16 05:31:01 +05:30
regulator
regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
2026-07-16 16:19:07 +01:00
remoteproc
remoteproc: qcom: pas: Drop start/stop completion from struct qcom_pas
2026-06-08 21:53:51 -05:00
resctrl
Merge tag 'arm64-upstream' of gitolite.kernel.org:pub/scm/linux/kernel/git/arm64/linux
2026-06-16 05:18:04 +05:30
reset
Merge tag 'reset-fixes-for-v7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/pza/linux into arm/fixes
2026-07-10 14:15:39 +02:00
rpmsg
Merge tag 'rpmsg-v7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/remoteproc/linux
2026-06-20 23:31:15 -07:00
rtc
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
s390
s390/zcrypt: Remove the empty file
2026-07-08 17:02:47 +02:00
sbus
…
scsi
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
2026-07-12 22:21:22 -04:00
sh
…
siox
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
slimbus
slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock
2026-06-05 17:19:51 +02:00
soc
Merge tag 'tegra-for-7.2-soc-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tegra/linux into arm/fixes
2026-07-10 14:42:00 +02:00
soundwire
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
spi
spi: cadence-quadspi: Fix indirect write timeout when DMA read mode is enabled
2026-07-14 12:54:50 +01:00
spmi
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
ssb
…
staging
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
2026-07-07 13:43:27 +02:00
target
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
2026-07-12 22:21:22 -04:00
tc
…
tee
Merge tag 'soc-drivers-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc
2026-06-17 11:21:40 -07:00
thermal
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
thunderbolt
Merge tag 'usb-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb
2026-06-22 12:09:47 -07:00
tty
Merge tag 'tty-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty
2026-07-12 12:29:38 -07:00
ufs
scsi: ufs: core: tracing: Do not dereference pointers in TP_printk()
2026-07-08 21:51:36 -04:00
uio
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
usb
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
2026-07-23 08:26:15 -07:00
vdpa
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
vfio
vfio/pci: Expose latched module parameter policy in debugfs
2026-06-29 14:26:31 -06:00
vhost
vhost-net: fix TX stall when vhost owns virtio-net header
2026-07-21 13:25:34 +02:00
video
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
virt
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
virtio
mm: page_reporting: allow driver to set batch capacity
2026-07-09 15:48:56 -07:00
w1
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
watchdog
Merge tag 'watchdog-for-v7.2-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging
2026-07-22 11:15:49 -07:00
xen
Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
2026-07-18 12:36:19 -07:00
zorro
…
Kconfig
…
Makefile
…