Greg Kroah-Hartman aa2f716327 usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT ...

A broken/malicious port can transmit a CRC-valid frame whose header
advertises up to seven data objects but whose body carries fewer than
that.  Check for this, and rightfully reject the message, instead of
reading from uninitialized stack memory.

Assisted-by: gkh_clanker_t1000
Cc: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Cc: "André Draszik" <andre.draszik@linaro.org>
Cc: Badhri Jagan Sridharan <badhri@google.com>
Cc: Amit Sunil Dhamne <amitsd@google.com>
Cc: stable <stable@kernel.org>
Link: https://patch.msgid.link/2026051350-sitter-canopener-9045@gregkh
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-05-19 12:25:40 +02:00

..

atm

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

c67x00

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

cdns3

Revert "usb: cdns3: Add USBSSP platform driver support"

2026-04-03 14:05:13 +02:00

chipidea

usb: chipidea: otg: not wait vbus drop if use role_switch

2026-04-07 13:46:54 +02:00

class

usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl

2026-04-27 10:00:18 -06:00

common

usb: ulpi: fix memory leak on ulpi_register() error paths

2026-04-27 09:49:43 -06:00

core

usb: core: Clean up SuperSpeed/eUSB2 descriptor validation logging

2026-05-18 15:16:58 +02:00

dwc2

usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()

2026-03-30 17:05:07 +02:00

dwc3

usb: dwc3: Move GUID programming after PHY initialization

2026-04-27 09:57:26 -06:00

early

usb: early: xhci-dbc: Fix early_ioremap leak

2025-07-07 11:04:46 +02:00

fotg210

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

gadget

usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling

2026-05-18 15:14:39 +02:00

host

drivers/usb/host: Fix spelling error 'seperate' -> 'separate'

2026-04-11 12:02:11 +02:00

image

Merge 7.0-rc4 into usb-next

2026-03-16 11:50:48 +01:00

isp1760

Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses

2026-02-22 08:26:33 -08:00

misc

Merge tag 'v7.0-rc7' into usb-next

2026-04-06 09:06:39 +02:00

mon

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

mtu3

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

musb

usb: musb: Use safer strscpy() instead of strcpy()

2026-03-11 15:39:04 +01:00

phy

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

renesas_usbhs

usb: renesas_usbhs: use kzalloc_flex

2026-03-18 15:51:48 +01:00

roles

usb: roles: get usb role switch from parent only for usb-b-connector

2026-03-11 16:22:22 +01:00

serial

USB: serial: option: add Telit Cinterion LE910Cx compositions

2026-04-30 10:53:56 +02:00

storage

usb: storage: Expand range of matched versions for VL817 quirks entry

2026-04-07 13:47:23 +02:00

typec

usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT

2026-05-19 12:25:40 +02:00

usbip

usbip: validate number_of_packets in usbip_pack_ret_submit()

2026-04-07 13:48:44 +02:00

Kconfig

usb: pci-quirks: handle HAS_IOPORT dependency for AMD quirk

2023-10-02 16:19:12 +02:00

Makefile

usb: isp1362-hcd: remove Philips ISP1362 USB OTG controller driver

2026-01-07 16:13:19 +01:00

usb-skeleton.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00