Bartosz Golaszewski 5b6b6fc491 nvmem: core: fix use-after-free bugs in error paths ...

Fix several instances of error paths in which we call
__nvmem_device_put() - which may end up freeing the underlying memory
and other resources - and then keep on using the nvmem structure. Always
put the reference to the nvmem device as the last step before returning
the error code.

Cc: stable@vger.kernel.org
Fixes: 7ae6478b30 ("nvmem: core: rework nvmem cell instance creation")
Fixes: e888d445ac ("nvmem: resolve cells from DT at registration time")
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Srinivas Kandagatla <srini@kernel.org>
Link: https://patch.msgid.link/20260530204340.116743-3-srini@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-06-05 17:18:58 +02:00

..

layouts

nvmem: layouts: onie-tlv: fix hang on unknown types

2026-06-05 17:18:58 +02:00

an8855-efuse.c

nvmem: an8855: Add support for Airoha AN8855 Switch EFUSE

2025-09-12 15:49:03 +02:00

apple-efuses.c

nvmem: add missing MODULE_DESCRIPTION() macros

2024-07-05 09:55:04 +02:00

apple-spmi-nvmem.c

nvmem: Add apple-spmi-nvmem driver

2025-05-21 14:28:27 +02:00

bcm-ocotp.c

nvmem: Explicitly include correct DT includes

2023-08-23 16:34:01 +02:00

brcm_nvram.c

kernel.h: drop hex.h and update all hex.h users

2026-01-20 19:44:19 -08:00

core.c

nvmem: core: fix use-after-free bugs in error paths

2026-06-05 17:18:58 +02:00

imx-iim.c

nvmem: imx-iim: Convert comma to semicolon

2024-11-05 05:33:47 +01:00

imx-ocotp-ele.c

nvmem: imx: assign nvmem_cell_info::raw_len

2026-04-02 16:44:40 +02:00

imx-ocotp-scu.c

nvmem: add explicit config option to read old syntax fixed OF cells

2023-10-21 19:19:06 +02:00

imx-ocotp.c

nvmem: imx: assign nvmem_cell_info::raw_len

2026-04-02 16:44:40 +02:00

internals.h

nvmem: core: Expose cells through sysfs

2023-12-15 13:30:08 +01:00

jz4780-efuse.c

…

Kconfig

nvmem: an8855: drop an unused Kconfig symbol

2026-01-26 16:40:33 +01:00

lan9662-otpc.c

nvmem: lan9662-otp: Change return type of lan9662_otp_wait_flag_clear()

2022-11-22 18:22:05 +01:00

layerscape-sfp.c

…

layouts.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

lpc18xx_eeprom.c

Get rid of 'remove_new' relic from platform driver struct

2024-12-01 15:12:43 -08:00

lpc18xx_otp.c

nvmem: Correct some typos in comments

2024-11-05 05:33:47 +01:00

Makefile

nvmem: Add driver for the eeprom in qnap-mcu controllers

2025-11-24 18:06:22 +01:00

max77759-nvmem.c

nvmem: max77759: Add Maxim MAX77759 NVMEM driver

2025-05-09 15:23:18 +01:00

meson-efuse.c

Merge tag 'char-misc-6.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2024-07-19 15:55:08 -07:00

meson-mx-efuse.c

nvmem: meson-mx-efuse: Remove nvmem_device from efuse struct

2024-05-03 07:26:39 +02:00

microchip-otpc.c

nvmem: Correct some typos in comments

2024-11-05 05:33:47 +01:00

mtk-efuse.c

Get rid of 'remove_new' relic from platform driver struct

2024-12-01 15:12:43 -08:00

mxs-ocotp.c

nvmem: Use device_get_match_data()

2023-10-21 19:19:15 +02:00

nintendo-otp.c

nvmem: nintendo-otp: Use devm_platform_ioremap_resource()

2023-04-05 19:41:12 +02:00

qcom-spmi-sdam.c

nvmem: qcom-spmi-sdam: Set size in struct nvmem_config

2025-01-10 16:16:48 +01:00

qfprom.c

nvmem: qfprom: switch to 4-byte aligned reads

2025-04-11 14:41:22 +02:00

qnap-mcu-eeprom.c

nvmem: qnap-mcu-eeprom: Fix struct assignments using commas instead of semicolons

2026-04-02 16:15:56 +02:00

qoriq-efuse.c

nvmem: add new NXP QorIQ eFuse driver

2023-08-23 16:34:01 +02:00

rave-sp-eeprom.c

nvmem: add explicit config option to read old syntax fixed OF cells

2023-10-21 19:19:06 +02:00

rcar-efuse.c

nvmem: rcar-efuse: add missing MODULE_DEVICE_TABLE

2025-10-22 08:02:38 +02:00

rmem.c

nvmem: rmem: add CRC validation for Mobileye EyeQ5 NVMEM

2024-12-30 15:36:00 +01:00

rockchip-efuse.c

nvmem: rockchip-efuse: set type to OTP

2024-07-05 09:55:04 +02:00

rockchip-otp.c

nvmem: rockchip-otp: Add support for RK3528

2026-04-02 16:15:56 +02:00

s32g-ocotp-nvmem.c

nvmem: s32g-ocotp: Add driver for S32G OCOTP

2025-09-12 15:49:03 +02:00

sc27xx-efuse.c

nvmem: sc27xx: fix module autoloading

2024-05-03 07:26:38 +02:00

sec-qfprom.c

nvmem: add explicit config option to read old syntax fixed OF cells

2023-10-21 19:19:06 +02:00

snvs_lpgpr.c

nvmem: Explicitly include correct DT includes

2023-08-23 16:34:01 +02:00

sprd-efuse.c

nvmem: sprd: fix module autoloading

2024-05-03 07:26:38 +02:00

stm32-bsec-optee-ta.c

nvmem: stm32: add OP-TEE support for STM32MP13x

2023-02-06 19:06:59 +01:00

stm32-bsec-optee-ta.h

nvmem: stm32: add OP-TEE support for STM32MP13x

2023-02-06 19:06:59 +01:00

stm32-romem.c

nvmem: stm32: add support for STM32MP25 BSEC to control OTP data

2023-12-15 13:30:08 +01:00

sunplus-ocotp.c

nvmem: sunplus-ocotp: Use devm_platform_ioremap_resource_byname() helper function

2024-09-03 12:13:23 +02:00

sunxi_sid.c

nvmem: add explicit config option to read old syntax fixed OF cells

2023-10-21 19:19:06 +02:00

u-boot-env.c

nvmem: layouts: add U-Boot env layout

2024-09-11 16:05:15 +02:00

uniphier-efuse.c

nvmem: add explicit config option to read old syntax fixed OF cells

2023-10-21 19:19:06 +02:00

vf610-ocotp.c

nvmem: vf610-ocotp: Use devm_platform_get_and_ioremap_resource()

2023-04-05 19:41:13 +02:00

zynqmp_nvmem.c

nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy

2026-04-02 16:44:40 +02:00