mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-07-22 04:37:32 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
3318dc299b072a0511d6dfd8367f3304fb6d9827
linux/drivers
History
Suzuki K Poulose 3318dc299b irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() 
With ACPI in place, gicv2m_get_fwnode() is registered with the pci
subsystem as pci_msi_get_fwnode_cb(), which may get invoked at runtime
during a PCI host bridge probe. But, the call back is wrongly marked as
__init, causing it to be freed, while being registered with the PCI
subsystem and could trigger:

 Unable to handle kernel paging request at virtual address ffff8000816c0400
  gicv2m_get_fwnode+0x0/0x58 (P)
  pci_set_bus_msi_domain+0x74/0x88
  pci_register_host_bridge+0x194/0x548

This is easily reproducible on a Juno board with ACPI boot.

Retain the function for later use.

Fixes: 0644b3daca ("irqchip/gic-v2m: acpi: Introducing GICv2m ACPI support")
Signed-off-by: Suzuki K Poulose <suzuki.poulose@arm.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Reviewed-by: Marc Zyngier <maz@kernel.org>
Cc: stable@vger.kernel.org
2025-04-26 10:17:24 +02:00
..
accel
accel/ivpu: Add cmdq_id to job related logs
2025-04-11 12:07:44 +02:00
accessibility
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
acpi
gcc-15: disable '-Wunterminated-string-initialization' entirely for now
2025-04-20 15:30:53 -07:00
amba
iommu: Get DT/ACPI parsing into the proper probe path
2025-03-11 14:05:43 +01:00
android
…
ata
ata: libata-sata: Save all fields from sense data descriptor
2025-04-16 17:33:17 +09:00
atm
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
auxdisplay
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
base
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
bcma
…
block
Merge tag 'block-6.15-20250417' of git://git.kernel.dk/linux
2025-04-18 09:21:14 -07:00
bluetooth
Bluetooth: vhci: Avoid needless snprintf() calls
2025-04-16 16:50:47 -04:00
bus
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
cache
…
cdrom
…
cdx
Merge branches 'apple/dart', 'arm/smmu/updates', 'arm/smmu/bindings', 'rockchip', 's390', 'core', 'intel/vt-d' and 'amd/amd-vi' into next
2025-03-20 09:11:09 +01:00
char
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
clk
Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rmk/linux
2025-04-03 12:21:44 -07:00
clocksource
Merge tag 'riscv-for-linus-6.15-mw1' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux
2025-04-04 09:49:17 -07:00
comedi
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
connector
…
counter
Merge tag 'char-misc-6.15-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2025-04-02 18:03:34 -07:00
cpufreq
Merge tag 'amd-pstate-v6.15-2025-04-15' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/superm1/linux
2025-04-17 17:55:09 +02:00
cpuidle
Merge tag 'pmdomain-v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm
2025-03-25 20:40:51 -07:00
crypto
crypto: caam/qi - Fix drv_ctx refcount bug
2025-04-09 21:28:31 +08:00
cxl
Merge tag 'cxl-for-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/cxl/cxl
2025-04-02 20:04:43 -07:00
dax
device/dax: properly refcount device dax pages when mapping
2025-03-17 22:06:41 -07:00
dca
…
devfreq
…
dio
…
dma
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
dma-buf
dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline()
2025-04-11 14:22:22 +02:00
dpll
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-03-20 21:38:01 +01:00
edac
Merge tag 'edac_updates_for_v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras
2025-03-25 14:00:26 -07:00
eisa
…
extcon
…
firewire
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
firmware
Merge tag 'sound-6.15-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound
2025-04-17 10:14:51 -07:00
fpga
fpga: tests: add module descriptions
2025-04-11 17:32:38 -07:00
fsi
…
fwctl
fwctl: Fix repeated device word in log message
2025-04-11 20:47:45 -03:00
gnss
…
gpio
gpiolib: Allow to use setters with return value for output-only gpios
2025-04-14 20:31:00 +02:00
gpu
Merge tag 'drm-msm-fixes-2025-04-18' of https://gitlab.freedesktop.org/drm/msm into drm-fixes
2025-04-19 15:09:29 +10:00
greybus
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
hid
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
hsi
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
hte
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
hv
Merge tag 'mm-stable-2025-03-30-16-52' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-04-01 09:29:18 -07:00
hwmon
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
hwspinlock
hwspinlock: Remove unused hwspin_lock_get_id()
2025-03-21 17:12:04 -05:00
hwtracing
Merge tag 'char-misc-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2025-04-01 11:26:08 -07:00
i2c
Merge tag 'i2c-host-fixes-6.15-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux into i2c/for-current
2025-04-18 23:42:56 +02:00
i3c
i3c: Add NULL pointer check in i3c_master_queue_ibi()
2025-03-31 11:44:00 +02:00
idle
Merge tag 'pm-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2025-03-25 15:00:18 -07:00
iio
gcc-15: add '__nonstring' markers to byte arrays
2025-04-20 11:57:54 -07:00
infiniband
RDMA/bnxt_re: Remove unusable nq variable
2025-04-10 14:47:55 -03:00
input
gcc-15: add '__nonstring' markers to byte arrays
2025-04-20 11:57:54 -07:00
interconnect
…
iommu
iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent()
2025-04-11 12:44:27 +02:00
ipack
…
irqchip
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
2025-04-26 10:17:24 +02:00
isdn
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
leds
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
macintosh
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
mailbox
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
mcb
…
md
gcc-15: get rid of misc extra NUL character padding
2025-04-20 11:57:54 -07:00
media
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
memory
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
memstick
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
message
Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
2025-03-26 19:57:34 -07:00
mfd
Merge tag 'mfd-next-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd
2025-03-29 14:33:13 -07:00
misc
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
mmc
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
most
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
mtd
mtd: rawnand: Add status chack in r852_ready()
2025-04-07 09:02:49 +02:00
mux
…
net
gcc-15: work around sequence-point warning
2025-04-20 11:57:54 -07:00
nfc
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
ntb
Merge tag 'ntb-6.15' of https://github.com/jonmason/ntb
2025-04-04 14:23:07 -07:00
nubus
…
nvdimm
Merge tag 'libnvdimm-for-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm
2025-04-02 20:27:18 -07:00
nvme
Merge tag 'block-6.15-20250417' of git://git.kernel.dk/linux
2025-04-18 09:21:14 -07:00
nvmem
net, treewide: define and use MAC_ADDR_STR_LEN
2025-03-19 19:17:58 +01:00
of
Merge tag 'devicetree-for-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux
2025-03-29 11:23:16 -07:00
opp
…
parisc
…
parport
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
pci
Merge tag 'irq-urgent-2025-04-18' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2025-04-18 13:28:41 -07:00
pcmcia
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
peci
…
perf
Merge tag 'pci-v6.15-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci
2025-03-28 19:36:53 -07:00
phy
Merge tag 'phy-for-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/phy/linux-phy
2025-04-01 12:47:11 -07:00
pinctrl
Merge tag 'pinctrl-v6.15-1' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl
2025-03-29 16:59:16 -07:00
platform
platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug
2025-04-16 11:15:22 +03:00
pmdomain
pmdomain: arm: scmi_pm_domain: Remove redundant state verification
2025-03-17 11:12:01 +01:00
pnp
Merge tag 'staging-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
2025-04-02 18:09:17 -07:00
power
gcc-15: get rid of misc extra NUL character padding
2025-04-20 11:57:54 -07:00
powercap
Merge tag 'pm-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2025-03-25 15:00:18 -07:00
pps
treewide: Convert new and leftover hrtimer_init() users
2025-04-05 10:30:17 +02:00
ps3
…
ptp
ptp: ocp: fix start time alignment in ptp_ocp_signal_set
2025-04-16 18:23:57 -07:00
pwm
Merge tag 'pwm/for-6.15-rc2-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/ukleinek/linux
2025-04-12 08:11:19 -07:00
rapidio
…
ras
RAS/AMD/FMPM: Get masked address
2025-04-08 19:30:58 +02:00
regulator
Merge tag 'objtool-urgent-2025-04-01' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2025-04-02 10:30:10 -07:00
remoteproc
remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
2025-03-22 08:42:39 -05:00
reset
Merge tag 'rproc-v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/remoteproc/linux
2025-03-29 17:18:50 -07:00
rpmsg
…
rtc
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
s390
s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
2025-04-09 12:12:41 +02:00
sbus
…
scsi
Merge branch '6.15/scsi-queue' into 6.15/scsi-fixes
2025-04-08 22:04:31 -04:00
sh
sh: remove duplicate ioread/iowrite helpers
2025-03-11 10:41:18 +01:00
siox
…
slimbus
…
soc
Merge tag 'soc-drivers-6.15-2' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc
2025-04-04 09:06:32 -07:00
soundwire
Merge tag 'soundwire-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/soundwire
2025-04-01 12:43:13 -07:00
spi
spi: spi-imx: Add check for spi_imx_setupxfer()
2025-04-17 12:25:12 +01:00
spmi
…
ssb
…
staging
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
target
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
tc
…
tee
…
thermal
thermal: intel: int340x: Fix Panther Lake DLVR support
2025-04-15 18:57:25 +02:00
thunderbolt
Merge tag 'usb-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb
2025-04-02 18:23:31 -07:00
tty
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
ufs
Merge branch '6.15/scsi-queue' into 6.15/scsi-fixes
2025-04-08 22:04:31 -04:00
uio
…
usb
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
vdpa
…
vfio
vfio/pci: Virtualize zero INTx PIN if no pdev->irq
2025-04-14 08:31:45 -06:00
vhost
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2025-04-01 18:52:54 -07:00
video
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
virt
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
virtio
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2025-04-01 18:52:54 -07:00
w1
…
watchdog
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
xen
x86/xen: fix balloon target initialization for PVH dom0
2025-04-07 11:24:12 +02:00
zorro
…
Kconfig
…
Makefile
…