linux-yocto/drivers
Vitaliy Shevtsov fe399aa5a4 scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
[ Upstream commit 2a8a5a5dd0 ]

strsep() modifies the address of the pointer passed to it so that it no
longer points to the original address. This means kfree() gets the wrong
pointer.

Fix this by passing unmodified pointer returned from kstrdup() to
kfree().

Found by Linux Verification Center (linuxtesting.org) with Svace.

Fixes: 4df84e8466 ("scsi: elx: efct: Driver initialization routines")
Signed-off-by: Vitaliy Shevtsov <v.shevtsov@mt-integration.ru>
Link: https://lore.kernel.org/r/20250612163616.24298-1-v.shevtsov@mt-integration.ru
Reviewed-by: Daniel Wagner <dwagner@suse.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-06-27 11:07:41 +01:00
..
accessibility
acpi ACPI: battery: negate current when discharging 2025-06-27 11:07:32 +01:00
amba
android
ata ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 2025-06-27 11:07:28 +01:00
atm atm: atmtcp: Free invalid length skb in atmtcp_c_send(). 2025-06-27 11:07:39 +01:00
auxdisplay auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" 2025-06-04 14:40:07 +02:00
base software node: Correct a OOB check in software_node_get_reference_args() 2025-06-27 11:07:35 +01:00
bcma
block aoe: clean device rq_list in aoedev_downdev() 2025-06-27 11:07:39 +01:00
bluetooth Bluetooth: hci_qca: move the SoC type check to the right place 2025-06-27 11:07:05 +01:00
bus Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" 2025-06-27 11:07:36 +01:00
cdrom
char tpm: tis: Double the timeout B to 4s 2025-05-22 14:10:00 +02:00
clk clk: rockchip: rk3036: mark ddrphy as critical 2025-06-27 11:07:34 +01:00
clocksource clocksource: mips-gic-timer: Enable counter when CPUs start 2025-06-04 14:40:12 +02:00
comedi comedi: jr3_pci: Fix synchronous deletion of timer 2025-05-02 07:47:08 +02:00
connector
counter counter: interrupt-cnt: Protect enable/disable OPs with mutex 2025-06-27 11:07:16 +01:00
cpufreq Revert "cpufreq: tegra186: Share policy per cluster" 2025-06-27 11:07:40 +01:00
cpuidle cpuidle: menu: Avoid discarding useful information 2025-06-04 14:40:11 +02:00
crypto crypto: marvell/cesa - Do not chain submitted requests 2025-06-27 11:07:25 +01:00
cxl
dax
dca
devfreq
dio
dma dmaengine: ti: Add NULL check in udma_probe() 2025-06-27 11:07:16 +01:00
dma-buf udmabuf: use sgtable-based scatterlist wrappers 2025-06-27 11:07:37 +01:00
edac EDAC/altera: Use correct write width with the INTTEST register 2025-06-27 11:07:29 +01:00
eisa
extcon
firewire
firmware efi/libstub: Describe missing 'out' parameter in efi_load_initrd 2025-06-27 11:07:10 +01:00
fpga fpga: altera-cvp: Increase credit timeout 2025-06-04 14:40:10 +02:00
fsi
gnss
gpio gpio: pca953x: fix IRQ storm on system wake up 2025-06-04 14:40:01 +02:00
gpu drm/nouveau/bl: increase buffer size to avoid truncate warning 2025-06-27 11:07:38 +01:00
greybus
hid HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() 2025-06-27 11:07:24 +01:00
hsi HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition 2025-04-25 10:43:47 +02:00
hte
hv Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() 2025-05-22 14:10:05 +02:00
hwmon hwmon: (occ) fix unaligned accesses 2025-06-27 11:07:39 +01:00
hwspinlock
hwtracing coresight: prevent deactivate active config while enabling the config 2025-06-27 11:07:17 +01:00
i2c i2c: npcm: Add clock toggle recovery 2025-06-27 11:07:33 +01:00
i3c i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() 2025-06-04 14:40:22 +02:00
idle cpuidle, intel_idle: Fix CPUIDLE_FLAG_IBRS 2025-03-13 12:53:11 +01:00
iio iio: accel: fxls8962af: Fix temperature calculation 2025-06-27 11:07:37 +01:00
infiniband RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction 2025-06-27 11:07:30 +01:00
input Input: sparcspkr - avoid unannotated fall-through 2025-06-27 11:07:37 +01:00
interconnect
iommu iommu/amd: Ensure GA log notifier callbacks finish running before module unload 2025-06-27 11:07:34 +01:00
ipack
irqchip irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() 2025-05-09 09:41:45 +02:00
isdn
leds leds: pwm-multicolor: Add check for fwnode_property_read_u32 2025-06-04 14:40:11 +02:00
macintosh
mailbox mailbox: use error ret code of of_parse_phandle_with_args() 2025-06-04 14:40:03 +02:00
mcb mcb: fix a double free bug in chameleon_parse_gdd() 2025-05-02 07:46:57 +02:00
md dm-mirror: fix a tiny race condition 2025-06-27 11:07:30 +01:00
media media: uvcvideo: Fix deferred probing error 2025-06-27 11:07:28 +01:00
memory memory: omap-gpmc: drop no compatible check 2025-04-10 14:33:39 +02:00
memstick memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove 2025-04-07 10:05:46 +02:00
message
mfd mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE 2025-06-27 11:07:15 +01:00
misc VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify 2025-06-27 11:07:25 +01:00
mmc mmc: Add quirk to disable DDR50 tuning 2025-06-27 11:07:32 +01:00
most
mtd mtd: nand: sunxi: Add randomizer configuration before randomizer enable 2025-06-27 11:07:30 +01:00
mux
net net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() 2025-06-27 11:07:39 +01:00
nfc
ntb ntb_hw_amd: Add NTB PCI ID for new gen CPU 2025-05-02 07:47:04 +02:00
nubus
nvdimm libnvdimm/labels: Fix divide error in nd_label_data_init() 2025-06-04 14:40:04 +02:00
nvme nvmet-fcloop: access fcpreq only when holding reqlock 2025-06-27 11:07:24 +01:00
nvmem
of of: module: add buffer overflow check in of_modalias() 2025-05-02 07:47:08 +02:00
opp
parisc
parport
pci PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit() 2025-06-27 11:07:31 +01:00
pcmcia
peci
perf perf/arm-cmn: Initialise cmn->cpu earlier 2025-06-04 14:40:25 +02:00
phy phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug 2025-06-27 11:07:16 +01:00
pinctrl pinctrl: mcp23s08: Reset all pins to input at probe 2025-06-27 11:07:35 +01:00
platform platform/loongarch: laptop: Add backlight power control support 2025-06-27 11:07:40 +01:00
pnp
power power: supply: bq27xxx: Retrieve again when busy 2025-06-27 11:07:32 +01:00
powercap powercap: call put_device() on an error path in powercap_register_control_type() 2025-03-28 21:58:50 +01:00
pps
ps3
ptp ptp: allow reading of currently dialed frequency to succeed on free-running clocks 2025-06-27 11:07:39 +01:00
pwm pwm: fsl-ftm: Handle clk_get_rate() returning 0 2025-04-25 10:43:34 +02:00
rapidio drivers/rapidio/rio_cm.c: prevent possible heap overwrite 2025-06-27 11:07:36 +01:00
ras
regulator regulator: max14577: Add error check for max14577_read_reg() 2025-06-27 11:07:30 +01:00
remoteproc remoteproc: core: Release rproc->clean_table after rproc_attach() fails 2025-06-27 11:07:31 +01:00
reset
rpmsg rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() 2025-06-27 11:07:15 +01:00
rtc rtc: sh: assign correct interrupts with DT 2025-06-27 11:07:15 +01:00
s390 scsi: s390: zfcp: Ensure synchronous unit_add 2025-06-27 11:07:37 +01:00
sbus
scsi scsi: elx: efct: Fix memory leak in efct_hw_parse_filter() 2025-06-27 11:07:41 +01:00
sh
siox
slimbus slimbus: messaging: Free transaction ID in delayed interrupt scenario 2025-03-13 12:53:22 +01:00
soc soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() 2025-06-27 11:07:14 +01:00
soundwire soundwire: slave: fix an OF node reference leak in soundwire slave device 2025-04-10 14:33:35 +02:00
spi spi: bcm63xx-hsspi: fix shared reset 2025-06-27 11:07:17 +01:00
spmi
ssb
staging staging: iio: ad5933: Correct settling cycles encoding per datasheet 2025-06-27 11:07:30 +01:00
target scsi: target: iscsi: Fix timeout on deleted connection 2025-06-04 14:40:01 +02:00
tc
tee tee: Prevent size calculation wraparound on 32-bit kernels 2025-06-27 11:07:36 +01:00
thermal thermal/drivers/qoriq: Power down TMU on system suspend 2025-06-04 14:40:03 +02:00
thunderbolt thunderbolt: Do not double dequeue a configuration request 2025-06-27 11:07:06 +01:00
tty serial: sh-sci: Increment the runtime usage counter for the earlycon device 2025-06-27 11:07:40 +01:00
ufs scsi: core: ufs: Fix a hang in the error handler 2025-06-27 11:07:21 +01:00
uio uio_hv_generic: Use correct size for interrupt and monitor pages 2025-06-27 11:07:31 +01:00
usb usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx() 2025-06-27 11:07:25 +01:00
vdpa vdpa/mlx5: Fix oversized null mkey longer than 32bit 2025-04-25 10:43:40 +02:00
vfio vfio/type1: Fix error unwind in migration dirty bitmap allocation 2025-06-27 11:07:11 +01:00
vhost
video fbcon: Make sure modelist not set on unregistered console 2025-06-27 11:07:35 +01:00
virt drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl 2025-03-13 12:53:23 +01:00
virtio virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN 2025-06-04 14:40:01 +02:00
vlynq
w1
watchdog watchdog: da9052_wdt: respect TWDMIN 2025-06-27 11:07:35 +01:00
xen xenbus: Allow PVH dom0 a non-local xenstore 2025-06-04 14:40:18 +02:00
zorro
Kconfig
Makefile