Dmitry Torokhov 48c9d92fd4 Input: ims-pcu - add response length checks ...

The driver processes response data from device buffers without verifying
that the device actually sent enough data. This can lead to
out-of-bounds reads or processing stale data.

Add checks for the expected response length before accessing the
buffers.

Fixes: 628329d524 ("Input: add IMS Passenger Control Unit driver")
Cc: stable@vger.kernel.org
Reported-by: Sashiko bot <sashiko-bot@kernel.org>
Assisted-by: Gemini:gemini-3.1-pro
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>

2026-06-06 21:05:16 -07:00

..

gameport

Input: fm801-gp - simplify initialisation of pci_device_id array

2026-05-07 10:05:40 -07:00

joystick

Merge tag 'v7.1-rc6' into next

2026-05-31 19:43:25 -07:00

keyboard

Input: Use named initializers for arrays of i2c_device_data

2026-05-30 22:10:47 -07:00

misc

Input: ims-pcu - add response length checks

2026-06-06 21:05:16 -07:00

mouse

Merge tag 'v7.1-rc6' into next

2026-05-31 19:43:25 -07:00

rmi4

Merge tag 'v7.1-rc6' into next

2026-05-31 19:43:25 -07:00

serio

Input: apbps2 - simplify resource mapping and IRQ retrieval

2026-06-06 14:00:34 -07:00

tablet

Input: aiptek - validate raw macro indices before updating state

2026-04-06 22:10:55 -07:00

tests

Merge tag 'input-for-v6.11-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2024-07-19 16:51:39 -07:00

touchscreen

Merge tag 'v7.1-rc6' into next

2026-05-31 19:43:25 -07:00

apm-power.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

evdev.c

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ff-core.c

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ff-memless.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

input-compat.c

Input: move input_bits_to_string() to input-compat.c

2025-08-21 12:00:58 -07:00

input-compat.h

Input: move input_bits_to_string() to input-compat.c

2025-08-21 12:00:58 -07:00

input-core-private.h

…

input-leds.c

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

input-mt.c

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

input-poller.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

input-poller.h

…

input.c

Merge tag 'v7.0-rc3' into next

2026-03-12 10:44:42 -07:00

joydev.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

Kconfig

Input: remove evbug driver

2024-12-17 13:53:52 -08:00

Makefile

Input: touch-overlay - add touchscreen overlay handling

2025-07-27 01:41:21 -07:00

matrix-keymap.c

Input: matrix-keymap - switch to using __free() cleanup facility

2024-08-29 10:59:30 -07:00

mousedev.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

sparse-keymap.c

Input: include export.h in modules using EXPORT_SYMBOL*()

2025-08-21 12:00:59 -07:00

touch-overlay.c

Input: include export.h in modules using EXPORT_SYMBOL*()

2025-08-21 12:00:59 -07:00

touchscreen.c

Input: include export.h in modules using EXPORT_SYMBOL*()

2025-08-21 12:00:59 -07:00

vivaldi-fmap.c

Input: add missing MODULE_DESCRIPTION() macros

2024-06-09 14:38:48 -07:00