This repository has been archived on 2026-03-14. You can view files and clone it, but cannot push or open issues or pull requests.

Matthew Daley 3f21ccce8d floppy: don't write kernel-only members to FDRAWCMD ioctl output ...

CVE-2014-1738

commit 2145e15e0557a01b9195d1c7199a1b92cb9be81f upstream.

Do not leak kernel-only floppy_raw_cmd structure members to userspace.
This includes the linked-list pointer and the pointer to the allocated
DMA space.

Signed-off-by: Matthew Daley <mattd@bugfuzz.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>

2014-06-27 07:58:39 -06:00

..

accessibility

…

acpi

…

amba

…

ata

…

atm

…

auxdisplay

…

base

Revert "base: sync: signal a sync pt when not adding to the active_list"

2013-06-06 14:06:01 -07:00

bcma

…

block

floppy: don't write kernel-only members to FDRAWCMD ioctl output

2014-06-27 07:58:39 -06:00

bluetooth

Update copyright to The Linux Foundation

2013-03-15 17:07:39 -07:00

cdrom

…

char

msm: rotator: signal timeline when rotator prepare fails.

2013-10-11 10:08:08 -07:00

clk

…

clocksource

…

connector

…

coresight

coresight: do not probe if cpu is not online

2013-03-15 17:09:34 -07:00

cpufreq

cpufreq: ondemand: change freq sync code to use per-CPU kthreads

2013-06-05 15:27:53 +00:00

cpuidle

…

crypto

crypto: msm: Check for invalid byte offset field

2013-06-18 12:10:23 -07:00

dca

…

devfreq

…

dio

…

dma

…

edac

…

eisa

…

firewire

…

firmware

…

gpio

gpio: msm-common: Fix irq_set_type for dual edge trigger

2013-06-25 21:28:40 +00:00

gpu

msm: kgsl: fix race condition setting the event->handle

2013-11-07 17:19:58 -08:00

gud

…

hid

…

hsi

…

hv

…

hwmon

Cap1106: To prevent Deadlock while switching on/off CapSensor

2013-07-15 17:58:28 +00:00

hwspinlock

…

i2c

Update copyright to The Linux Foundation

2013-03-15 17:07:39 -07:00

ide

…

idle

…

ieee802154

…

infiniband

…

input

TouchScreen: update firmware to A044.

2013-09-18 20:44:31 +00:00

iommu

iommu/core: pass a user-provided token to fault handlers

2013-09-06 16:20:47 -07:00

isdn

…

leds

display: JDI: config backlight level when kernel init

2013-04-18 16:09:22 -07:00

lguest

…

macintosh

…

mca

…

md

…

media

msm: camera: Print out event type when timeout happens

2013-11-13 12:42:49 -08:00

memstick

…

message

…

mfd

random: remove rand_initialize_irq()

2013-09-09 17:01:42 -07:00

misc

display: slimport: fix audio channel count switch

2013-10-11 18:13:54 +00:00

mmc

mmc: block: fix a bug of error handling in MMC driver

2013-10-09 15:55:26 -07:00

mtd

Update copyright to The Linux Foundation

2013-03-15 17:07:39 -07:00

net

UBUNTU: SAUCE: wcnss_wlan: don't free penv when it fails to trigger config

2014-02-17 15:20:46 +00:00

nfc

Remove a workaround since BCM20793 chip default is 7 bits address.

2013-04-18 16:07:56 -07:00

nubus

…

of

Update copyright to The Linux Foundation

2013-03-15 17:07:39 -07:00

oprofile

…

parisc

…

parport

…

pci

…

pcmcia

…

pinctrl

…

platform

msm: Change the permissions of sps debug files

2013-06-07 11:25:53 -07:00

pnp

…

power

UBUNTU: SAUCE: battery: quieten the battery charging messages by default

2014-03-28 14:46:10 +00:00

pps

…

ps3

…

ptp

…

rapidio

…

regulator

Update copyright to The Linux Foundation

2013-03-15 17:07:39 -07:00

remoteproc

iommu/core: pass a user-provided token to fault handlers

2013-09-06 16:20:47 -07:00

rpmsg

…

rtc

Update copyright to The Linux Foundation

2013-03-15 17:07:39 -07:00

s390

…

sbus

…

scsi

…

sfi

…

sh

…

slimbus

Update copyright to The Linux Foundation

2013-03-15 17:07:39 -07:00

sn

…

spi

Update copyright to The Linux Foundation

2013-03-15 17:07:39 -07:00

spmi

Update copyright to The Linux Foundation

2013-03-15 17:07:39 -07:00

ssb

…

staging

binder: search for receiving context pid in global namespace

2014-01-09 07:43:53 -07:00

switch

switch: Reset device's drvdata before destroying it

2013-03-15 17:13:04 -07:00

target

iscsi-target: fix heap buffer overflow on error

2014-06-26 13:52:33 -06:00

tc

…

thermal

thermal: pm8xxx-tm: Add configuration option for allowing shutdown override

2013-03-15 17:08:32 -07:00

tty

n_tty: Fix n_tty_write crash when echoing in raw mode

2014-06-27 07:47:23 -06:00

uio

…

usb

ci13xxx_udc: work around a gcc 4.8 bug detecting unused variables

2014-01-09 07:43:43 -07:00

uwb

…

vhost

…

video

msm: vidc: cache-invalidate encoder output buffers after alloc

2013-11-08 23:26:46 +00:00

virt

…

virtio

…

vlynq

…

w1

…

watchdog

…

xen

…

zorro

…

Kconfig

…

Makefile

drivers: usb: otg: Report the charger type and enable the USB host mode according to the ID pin status and the SlimPort status.

2013-04-18 16:07:58 -07:00