Dan Carpenter d5c7b42c9f Drivers: hv: vmbus: Use after free in __vmbus_open() ... [ Upstream commit 3e9bf43f7f7a46f21ec071cb47be92d0874c48da ] The "open_info" variable is added to the &vmbus_connection.chn_msg_list, but the error handling frees "open_info" without removing it from the list. This will result in a use after free. First remove it from the list, and then free it. Fixes: 6f3d791f30 ("Drivers: hv: vmbus: Fix rescind handling issues") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Andrea Parri <parri.andrea@gmail.com> Link: https://lore.kernel.org/r/YHV3XLCot6xBS44r@mwanda Signed-off-by: Wei Liu <wei.liu@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-05-14 09:50:20 +02:00
..
accessibility
acpi	ACPI: CPPC: Replace cppc_attr with kobj_attribute	2021-05-14 09:50:16 +02:00
amba
android
ata	ata: ahci: Disable SXS for Hisilicon Kunpeng920	2021-05-11 14:47:26 +02:00
atm	atm: idt77252: fix null-ptr-dereference	2021-03-30 14:31:50 +02:00
auxdisplay
base	node: fix device cleanups in error handling code	2021-05-14 09:50:19 +02:00
bcma
block	block/rnbd-clt: Fix missing a memory free when unloading the module	2021-05-11 14:47:31 +02:00
bluetooth	Bluetooth: btqca: Add valid le states quirk	2021-03-11 14:17:22 +01:00
bus	bus: qcom: Put child node before return	2021-05-14 09:50:13 +02:00
cdrom
char	tpm: vtpm_proxy: Avoid reading host log when using a virtual device	2021-05-11 14:47:35 +02:00
clk	clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0	2021-05-14 09:50:17 +02:00
clocksource	clocksource/drivers/ingenic_ost: Fix return value check in ingenic_ost_probe()	2021-05-14 09:50:16 +02:00
connector
counter	counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register	2021-03-25 09:04:16 +01:00
cpufreq	cpufreq: armada-37xx: Fix determining base CPU frequency	2021-05-14 09:50:17 +02:00
cpuidle	cpuidle: Fix ARM_QCOM_SPM_CPUIDLE configuration	2021-05-14 09:50:16 +02:00
crypto	crypto: chelsio - Read rxchannel-id from firmware	2021-05-14 09:50:19 +02:00
dax
dca
devfreq	PM / devfreq: Use more accurate returned new_freq as resume_freq	2021-05-14 09:50:15 +02:00
dio
dma	dmaengine: tegra20: Fix runtime PM imbalance on error	2021-04-28 13:40:01 +02:00
dma-buf
edac	EDAC/amd64: Do not load on family 0x15, model 0x13	2021-03-07 12:34:08 +01:00
eisa
extcon	extcon: arizona: Fix various races on driver unbind	2021-05-11 14:47:24 +02:00
firewire	firewire: nosy: Fix a use-after-free bug in nosy_ioctl()	2021-04-07 15:00:11 +02:00
firmware	firmware: qcom-scm: Fix QCOM_SCM configuration	2021-05-14 09:50:19 +02:00
fpga	fpga: fpga-mgr: xilinx-spi: fix error messages on -EPROBE_DEFER	2021-05-14 09:50:06 +02:00
fsi
gnss
gpio	gpio: omap: Save and restore sysconfig	2021-04-28 13:39:59 +02:00
gpu	Revert "drm/qxl: do not run release if qxl failed to init"	2021-05-14 09:50:05 +02:00
greybus
hid	HID: wacom: Assign boolean values to a bool variable	2021-04-28 13:40:01 +02:00
hsi
hv	Drivers: hv: vmbus: Use after free in __vmbus_open()	2021-05-14 09:50:20 +02:00
hwmon
hwspinlock
hwtracing	intel_th: pci: Add Alder Lake-M support	2021-05-11 14:47:35 +02:00
i2c	i2c: designware: Adjust bus_freq_hz when refuse high speed mode set	2021-04-14 08:42:11 +02:00
i3c	Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register"	2021-05-14 09:50:05 +02:00
ide
idle
iio	iio: adc: Kconfig: make AD9467 depend on ADI_AXI_ADC symbol	2021-05-14 09:50:15 +02:00
infiniband	RDMA/addr: Be strict with gid size	2021-04-14 08:42:12 +02:00
input	Input: ili210x - add missing negation for touch indication on ili210x	2021-05-11 14:47:34 +02:00
interconnect	interconnect: core: fix error return code of icc_link_destroy()	2021-04-16 11:43:19 +02:00
iommu	iommu/amd: Fix performance counter initialization	2021-03-17 17:06:24 +01:00
ipack
irqchip	irqchip/gic-v3: Fix OF_BAD_ADDR error handling	2021-05-14 09:50:15 +02:00
isdn	mISDN: fix crash in fritzpci	2021-04-10 13:36:08 +02:00
leds
lightnvm
macintosh
mailbox
mcb
md	md: Fix missing unused status line of /proc/mdstat	2021-05-14 09:49:59 +02:00
media	media: venus: hfi_parser: Don't initialize parser on v1	2021-05-11 14:47:39 +02:00
memory	memory: samsung: exynos5422-dmc: handle clk_set_parent() failure	2021-05-14 09:50:19 +02:00
memstick
message
mfd	mfd: arizona: Fix rumtime PM imbalance on error	2021-05-11 14:47:31 +02:00
misc	misc: vmw_vmci: explicitly initialize vmci_datagram payload	2021-05-14 09:49:59 +02:00
mmc	mmc: sdhci-brcmstb: Remove CQE quirk	2021-05-11 14:47:26 +02:00
most
mtd	mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init	2021-05-14 09:50:15 +02:00
mux
net	Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit"	2021-05-14 09:50:05 +02:00
nfc
ntb
nubus
nvdimm	libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC	2021-04-21 13:00:55 +02:00
nvme	nvmet: return proper error code from discovery ctrl	2021-05-11 14:47:26 +02:00
nvmem	drivers: nvmem: Fix voltage settings for QTI qfprom-efuse	2021-05-14 09:50:14 +02:00
of	of: property: fw_devlink: do not link ".*,nr-gpios"	2021-04-14 08:41:58 +02:00
opp
oprofile
parisc
parport
pci	PCI: keystone: Let AM65 use the pci_ops defined in pcie-designware-host.c	2021-05-14 09:49:58 +02:00
pcmcia
perf	perf/arm_pmu_platform: Fix error handling	2021-05-11 14:47:19 +02:00
phy	phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally	2021-05-14 09:50:13 +02:00
pinctrl	pinctrl: core: Show pin numbers for the controllers with base = 0	2021-04-28 13:39:59 +02:00
platform	platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table	2021-05-14 09:50:20 +02:00
pnp
power	power: supply: cpcap-battery: fix invalid usage of list cursor	2021-05-11 14:47:32 +02:00
powercap
pps
ps3
ptp	ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation	2021-04-10 13:36:09 +02:00
pwm
rapidio
ras	RAS/CEC: Correct ce_add_elem()'s returned values	2021-04-14 08:42:12 +02:00
regulator	regulator: bd9576: Fix return from bd957x_probe()	2021-05-14 09:50:10 +02:00
remoteproc	remoteproc: qcom: pil_info: avoid 64-bit division	2021-04-14 08:42:05 +02:00
reset
rpmsg
rtc
s390	s390/zcrypt: fix zcard and zqueue hot-unplug memleak	2021-05-11 14:47:11 +02:00
sbus
scsi	scsi: libfc: Fix a format specifier	2021-05-11 14:47:31 +02:00
sfi
sh
siox
slimbus
soc	soc: qcom: mdt_loader: Detect truncated read of segments	2021-05-14 09:50:16 +02:00
soundwire	soundwire: stream: fix memory leak in stream config error path	2021-05-14 09:50:14 +02:00
spi	spi: spi-zynqmp-gqspi: Fix missing unlock on error in zynqmp_qspi_exec_op()	2021-05-14 09:50:19 +02:00
spmi
ssb
staging	staging: greybus: uart: fix unprivileged TIOCCSERIAL	2021-05-14 09:50:15 +02:00
target	scsi: target: pscsi: Fix warning in pscsi_complete_cmd()	2021-05-11 14:47:23 +02:00
tc
tee	tee: optee: do not check memref size on return from Secure World	2021-05-11 14:47:18 +02:00
thermal	thermal/core/fair share: Lock the thermal zone while looping over instances	2021-05-11 14:47:41 +02:00
thunderbolt	thunderbolt: Fix off by one in tb_port_find_retimer()	2021-04-14 08:42:03 +02:00
tty	serial: core: return early on unsupported ioctls	2021-05-14 09:50:19 +02:00
uio
usb	usbip: vudc: fix missing unlock on error in usbip_sockfd_store()	2021-05-14 09:50:19 +02:00
vdpa	vdpa/mlx5: Set err = -ENOMEM in case dma_map_sg_attrs fails	2021-04-28 13:39:59 +02:00
vfio	vfio: Depend on MMU	2021-05-07 11:04:33 +02:00
vhost	vhost-vdpa: fix vm_flags for virtqueue doorbell mapping	2021-05-11 14:47:12 +02:00
video	backlight: qcom-wled: Fix FSC update issue for WLED5	2021-05-11 14:47:25 +02:00
virt	nitro_enclaves: Fix stale file descriptors on failed usercopy	2021-05-11 14:47:11 +02:00
virtio
visorbus
vlynq
vme
w1
watchdog
xen	xen/events: fix setting irq affinity	2021-04-16 11:43:22 +02:00
zorro
Kconfig
Makefile