Jiangshan Yi 7e22c9f79b usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ...

ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check
in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT
endpoint size.  Both are taken independently from different endpoints
in usbio_probe(), so the check is wrong when they differ.

Use rxbuf_len for the IN direction.  This matches the buffer that
actually holds the response data.

Fixes: 121a0f839d ("usb: misc: Add Intel USBIO bridge driver")
Cc: stable <stable@kernel.org>
Signed-off-by: Jiangshan Yi <yijiangshan@kylinos.cn>
Tested-by: Antti Laakso <antti.laakso@linux.intel.com>
Link: https://patch.msgid.link/20260722101810.458634-1-yijiangshan@kylinos.cn
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-08-03 17:23:54 +02:00

..

sisusbvga

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

adutux.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

apple-mfi-fastcharge.c

USB: apple-mfi-fastcharge: drop redundant device reference

2026-03-18 15:51:44 +01:00

appledisplay.c

usb: misc: appledisplay: use HID includes

2026-03-30 16:47:26 +02:00

brcmstb-usb-pinmap.c

usb: misc: brcmstb-usb-pinmap: fix module autoloading

2024-08-25 13:45:56 +02:00

chaoskey.c

USB: chaoskey: Fix slab-use-after-free in chaoskey_release()

2026-07-08 16:29:16 +02:00

cypress_cy7c63.c

USB: cypress_cy7c63: drop redundant device reference

2026-03-11 15:14:35 +01:00

cytherm.c

USB: cytherm: drop redundant device reference

2026-03-11 15:14:35 +01:00

ehset.c

usb: misc: ehset: fix wrong if condition

2023-07-27 10:37:30 +02:00

emi26.c

USB: misc: Remove redundant license text

2017-11-04 11:55:38 +01:00

emi62.c

USB: misc: Remove redundant license text

2017-11-04 11:55:38 +01:00

ezusb.c

usb: misc: add missing MODULE_DESCRIPTION() macros

2024-06-20 19:18:24 +02:00

idmouse.c

USB: idmouse: fix use-after-free on disconnect race

2026-06-25 15:14:52 +01:00

iowarrior.c

USB: iowarrior: fix use-after-free on disconnect race

2026-06-25 15:14:48 +01:00

isight_firmware.c

usb: misc: add missing MODULE_DESCRIPTION() macros

2024-06-20 19:18:24 +02:00

Kconfig

USB: qcom: Unify user-visible "Qualcomm" name

2026-04-27 10:18:01 -06:00

ldusb.c

USB: ldusb: fix use-after-free on disconnect race

2026-06-25 15:14:57 +01:00

legousbtower.c

USB: legousbtower: fix use-after-free on disconnect race

2026-06-25 15:15:03 +01:00

lvstest.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

Makefile

usb: misc: Add Intel USBIO bridge driver

2025-09-12 14:05:09 +02:00

onboard_usb_dev_pdevs.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

onboard_usb_dev.c

usb: misc: onboard_usb_hub: Add Genesys Logic GL3590 hub support

2026-04-27 05:14:17 -06:00

onboard_usb_dev.h

usb: misc: onboard_usb_hub: Add Genesys Logic GL3590 hub support

2026-04-27 05:14:17 -06:00

qcom_eud.c

usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls

2025-08-13 17:13:45 +02:00

trancevibrator.c

USB: trancevibrator: drop redundant device reference

2026-03-11 15:14:35 +01:00

usb251xb.c

usb: misc: Use named initializers for struct i2c_device_id

2026-05-21 16:52:34 +02:00

usb3503.c

usb: misc: Use named initializers for struct i2c_device_id

2026-05-21 16:52:34 +02:00

usb4604.c

usb: misc: Use named initializers for struct i2c_device_id

2026-05-21 16:52:34 +02:00

usb-ljca.c

Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)

2026-07-03 07:38:17 +02:00

usbio.c

usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg

2026-08-03 17:23:54 +02:00

usblcd.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

usbsevseg.c

USB: usbsevseg: drop redundant device reference

2026-03-11 15:14:35 +01:00

usbtest.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

uss720.c

USB: misc: uss720: unregister parport on probe failure

2026-07-08 13:33:03 +02:00

yurex.c

usb: yurex: fix race in probe

2026-02-23 20:25:07 +01:00