Wei Chen b8b7d5eac5 fbdev: tgafb: Fix potential divide by zero ... [ Upstream commit f90bd245de82c095187d8c2cabb8b488a39eaecc ] fb_set_var would by called when user invokes ioctl with cmd FBIOPUT_VSCREENINFO. User-provided data would finally reach tgafb_check_var. In case var->pixclock is assigned to zero, divide by zero would occur when checking whether reciprocal of var->pixclock is too high. Similar crashes have happened in other fbdev drivers. There is no check and modification on var->pixclock along the call chain to tgafb_check_var. We believe it could also be triggered in driver tgafb from user site. Signed-off-by: Wei Chen <harperchen1110@gmail.com> Signed-off-by: Helge Deller <deller@gmx.de> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-04-06 12:10:40 +02:00
..
accessibility	tty: fix possible null-ptr-defer in spk_ttyio_release	2023-01-24 07:24:37 +01:00
acpi	ACPI: video: Add backlight=native DMI quirk for Dell Vostro 15 3535	2023-04-06 12:10:38 +02:00
amba
android
ata	ata: ahci: Revert "ata: ahci: Add Tiger Lake UP{3,4} AHCI controller"	2023-03-10 09:32:32 +01:00
atm	atm: idt77252: fix kmemleak when rmmod idt77252	2023-03-30 12:49:09 +02:00
auxdisplay	auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()	2023-03-11 13:55:16 +01:00
base	drivers: base: dd: fix memory leak with using debugfs_lookup()	2023-03-11 13:55:39 +01:00
bcma
block	block: sunvdc: add check for mdesc_grab() returning NULL	2023-03-22 13:33:47 +01:00
bluetooth	Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work	2023-03-30 12:49:12 +02:00
bus	bus: imx-weim: fix branch condition evaluates to a garbage value	2023-03-30 12:49:29 +02:00
cdrom
char	tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address	2023-03-17 08:50:30 +01:00
clk	clk: HI655X: select REGMAP instead of depending on it	2023-03-22 13:33:40 +01:00
clocksource	clocksource/drivers/riscv: Patch riscv_clock_next_event() jump before first use	2023-03-10 09:33:03 +01:00
comedi	comedi: adv_pci1760: Fix PWM instruction handling	2023-01-24 07:24:35 +01:00
connector
counter
cpufreq	cpufreq: davinci: Fix clk use after free	2023-03-10 09:33:01 +01:00
cpuidle	cpuidle: psci: Iterate backwards over list in psci_pd_remove()	2023-03-22 13:34:04 +01:00
crypto	crypto: qat - fix out-of-bounds read	2023-03-10 09:34:19 +01:00
cxl	cxl/pmem: Fix nvdimm registration races	2023-03-10 09:34:20 +01:00
dax	dax/kmem: Fix leak of memory-hotplug resources	2023-03-10 09:34:25 +01:00
dca
devfreq	PM/devfreq: governor: Add a private governor_data for governor	2023-01-07 11:11:40 +01:00
dio
dma	dmaengine: ptdma: check for null desc before calling pt_cmd_callback	2023-03-10 09:33:39 +01:00
dma-buf	dma-buf: actually set signaling bit for private stub fences	2023-02-09 11:28:23 +01:00
edac	EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info	2023-02-01 08:34:40 +01:00
eisa
extcon
firewire	firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region	2023-02-09 11:27:59 +01:00
firmware	firmware: arm_scmi: Fix device node validation for mailbox transport	2023-03-30 12:49:29 +02:00
fpga	fpga: microchip-spi: rewrite status polling in a time measurable way	2023-03-10 09:33:34 +01:00
fsi	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
gnss
gpio	gpio: vf610: connect GPIO label to dev name	2023-03-10 09:33:18 +01:00
gpu	drm/amdkfd: fix potential kgd_mem UAFs	2023-04-06 12:10:39 +02:00
greybus
hid	HID: intel-ish-hid: ipc: Fix potential use-after-free in work function	2023-03-30 12:49:16 +02:00
hsi
hte
hv	HV: hv_balloon: fix memory leak with using debugfs_lookup()	2023-02-09 11:28:21 +01:00
hwmon	hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs	2023-03-30 12:49:13 +02:00
hwspinlock
hwtracing	hwtracing: hisi_ptt: Only add the supported devices to the filters list	2023-03-10 09:33:31 +01:00
i2c	i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()	2023-03-30 12:49:30 +02:00
i3c
idle	cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*	2023-03-10 09:32:36 +01:00
iio	iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()	2023-03-11 13:55:35 +01:00
infiniband	RDMA/cma: Distinguish between sockaddr_in and sockaddr_in6 by size	2023-03-11 13:55:40 +01:00
input	Input: exc3000 - properly stop timer on shutdown	2023-03-17 08:50:19 +01:00
interconnect	interconnect: qcom: qcm2290: Fix MASTER_SNOC_BIMC_NRT	2023-03-30 12:48:59 +02:00
iommu	iommu: Attach device group to old domain in error path	2023-03-11 13:55:40 +01:00
ipack
irqchip	irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts	2023-03-10 09:33:07 +01:00
isdn	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
leds	leds: simatic-ipc-leds-gpio: Make sure we have the GPIO providing driver	2023-03-10 09:33:26 +01:00
macintosh	macintosh: windfarm: Use unsigned type for 1-bit bitfields	2023-03-17 08:50:31 +01:00
mailbox
mcb
md	md: avoid signed overflow in slot_store()	2023-04-06 12:10:39 +02:00
media	media: m5mols: fix off-by-one loop termination error	2023-03-22 13:33:53 +01:00
memory	memory: tegra30-emc: fix interconnect registration race	2023-03-22 13:33:56 +01:00
memstick
message
mfd	mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak	2023-03-11 13:55:32 +01:00
misc	misc: vmw_balloon: fix memory leak with using debugfs_lookup()	2023-03-11 13:55:39 +01:00
mmc	mmc: sdhci_am654: lower power-on failed message severity	2023-03-22 13:34:03 +01:00
most
mtd	ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed	2023-03-11 13:55:21 +01:00
mux
net	net: mscc: ocelot: fix stats region batching	2023-04-06 12:10:37 +02:00
nfc	nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition	2023-03-22 13:33:46 +01:00
ntb
nubus
nvdimm	cxl/pmem: Fix nvdimm registration races	2023-03-10 09:34:20 +01:00
nvme	nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000	2023-03-22 13:34:02 +01:00
nvmem	nvmem: core: fix return value	2023-02-09 11:28:25 +01:00
of	of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem	2023-02-22 12:59:46 +01:00
opp	OPP: fix error checking in opp_migrate_dentry()	2023-03-10 09:33:01 +01:00
parisc	parisc: led: Fix potential null-ptr-deref in start_task()	2023-01-07 11:11:55 +01:00
parport
pci	PCI: s390: Fix use-after-free of PCI resources with per-function hotplug	2023-03-22 13:33:45 +01:00
pcmcia
peci
perf	Partially revert "perf/arm-cmn: Optimise DTC counter accesses"	2023-02-01 08:34:49 +01:00
phy	phy: rockchip-typec: Fix unsigned comparison with less than zero	2023-03-11 13:55:40 +01:00
pinctrl	pinctrl: at91: use devm_kasprintf() to avoid potential leaks	2023-03-10 09:33:59 +01:00
platform	platform/x86: int3472: Add GPIOs to Surface Go 3 Board data	2023-03-30 12:49:19 +02:00
pnp
power	power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition	2023-03-30 12:49:01 +02:00
powercap	powercap: fix possible name leak in powercap_register_zone()	2023-03-10 09:32:56 +01:00
pps
ps3
ptp	ptp: vclock: use mutex to fix "sleep on atomic" bug	2023-03-11 13:55:25 +01:00
pwm	pwm: stm32-lp: fix the check on arr and cmp registers update	2023-03-11 13:55:17 +01:00
rapidio
ras
regulator	regulator: core: Use ktime_get_boottime() to determine how long a regulator was off	2023-03-10 09:34:25 +01:00
remoteproc	remoteproc/mtk_scp: Move clk ops outside send_lock	2023-03-10 09:34:26 +01:00
reset	reset: uniphier-glue: Fix possible null-ptr-deref	2023-02-01 08:34:05 +01:00
rpmsg	rpmsg: glink: Release driver_override	2023-03-10 09:33:45 +01:00
rtc	rtc: allow rtc_read_alarm without read_alarm callback	2023-03-11 13:55:30 +01:00
s390	s390: vfio-ap: tighten the NIB validity check	2023-03-10 09:33:02 +01:00
sbus
scsi	scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR	2023-03-30 12:49:21 +02:00
sh
siox
slimbus
soc	soc: qcom: llcc: Fix slice configuration values for SC8280XP	2023-03-30 12:49:29 +02:00
soundwire	soundwire: cadence: Drain the RX FIFO after an IO timeout	2023-03-11 13:55:40 +01:00
spi	spi: intel: Check number of chip selects after reading the descriptor	2023-03-17 08:50:20 +01:00
spmi
ssb
staging	staging: rtl8723bs: Pass correct parameters to cfg80211_get_bss()	2023-03-17 08:50:16 +01:00
target	scsi: target: iscsi: Fix an error message in iscsi_check_key()	2023-03-30 12:49:17 +02:00
tc
tee	tee: amdtee: fix race condition in amdtee_open_session	2023-03-30 12:49:29 +02:00
thermal	thermal: intel: BXT_PMIC: select REGMAP instead of depending on it	2023-03-11 13:55:32 +01:00
thunderbolt	thunderbolt: Limit USB3 bandwidth of certain Intel USB4 host routers	2023-04-06 12:10:33 +02:00
tty	tty: serial: fsl_lpuart: fix race on RX DMA shutdown	2023-04-06 12:10:36 +02:00
ufs	scsi: ufs: core: Add soft dependency on governor_simpleondemand	2023-03-30 12:49:17 +02:00
uio
usb	usb: ucsi_acpi: Increase the command completion timeout	2023-03-30 12:49:25 +02:00
vdpa	vp_vdpa: fix the crash in hot unplug with vp_vdpa	2023-03-22 13:34:03 +01:00
vfio	vfio/type1: restore locked_vm	2023-03-10 09:34:32 +01:00
vhost	vhost-vdpa: free iommu domain after last use during cleanup	2023-03-22 13:33:44 +01:00
video	fbdev: tgafb: Fix potential divide by zero	2023-04-06 12:10:40 +02:00
virt	virt/coco/sev-guest: Add throttling awareness	2023-03-22 13:34:06 +01:00
virtio	virtio_pci: modify ENOENT to EINVAL	2023-01-24 07:24:31 +01:00
vlynq
w1	w1: fix WARNING after calling w1_process()	2023-02-01 08:34:26 +01:00
watchdog	watchdog: sbsa_wdog: Make sure the timeout programming is within the limits	2023-03-11 13:55:24 +01:00
xen	xen/grant-dma-iommu: Implement a dummy probe_device() callback	2023-03-10 09:33:02 +01:00
zorro
Kconfig
Makefile