Zeng Tao a18cd6c9b6 usb: core: fix slab-out-of-bounds Read in read_descriptors ... The USB device descriptor may get changed between two consecutive enumerations on the same device for some reason, such as DFU or malicius device. In that case, we may access the changing descriptor if we don't take the device lock here. The issue is reported: https://syzkaller.appspot.com/bug?id=901a0d9e6519ef8dc7acab25344bd287dd3c7be9 Cc: stable <stable@vger.kernel.org> Cc: Alan Stern <stern@rowland.harvard.edu> Reported-by: syzbot+256e56ddde8b8957eabd@syzkaller.appspotmail.com Fixes: 217a9081d8 ("USB: add all configs to the "descriptors" attribute") Signed-off-by: Zeng Tao <prime.zeng@hisilicon.com> Link: https://lore.kernel.org/r/1599201467-11000-1-git-send-email-prime.zeng@hisilicon.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-09-04 16:41:22 +02:00
..
atm	usb: Use fallthrough pseudo-keyword	2020-07-10 08:55:17 +02:00
c67x00	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
cdns3	usb: cdns3: convert to devm_platform_ioremap_resource_byname	2020-07-29 16:49:37 +02:00
chipidea	ENDIAN issue fix and one query controller role API is introduced.	2020-07-29 13:57:09 +02:00
class	USB: cdc-acm: rework notification_buffer resizing	2020-08-18 11:55:23 +02:00
common	usb: common: usb-conn-gpio: Register charger	2020-07-30 08:45:24 +02:00
core	usb: core: fix slab-out-of-bounds Read in read_descriptors	2020-09-04 16:41:22 +02:00
dwc2	Revert "usb: dwc2: override PHY input signals with usb role switch support"	2020-07-27 15:34:15 +02:00
dwc3	Revert "usb: dwc3: meson-g12a: fix shared reset control use"	2020-09-04 16:41:22 +02:00
early	usb: early: xhci-dbc: File headers are not good candidates for kerneldoc	2020-07-09 17:19:59 +02:00
gadget	USB fixes for 5.9-rc3 - take 2	2020-08-30 10:51:03 -07:00
host	USB fixes for 5.9-rc3 - take 2	2020-08-30 10:51:03 -07:00
image	usb: Use fallthrough pseudo-keyword	2020-07-10 08:55:17 +02:00
isp1760	usb: Use fallthrough pseudo-keyword	2020-07-10 08:55:17 +02:00
misc	USB: lvtest: return proper error code in probe	2020-08-18 11:55:23 +02:00
mon	USB: mon: Use scnprintf() for avoiding potential buffer overflow	2020-03-12 09:49:28 +01:00
mtu3	usb: mtu3: simplify mtu3_req_complete()	2020-07-29 16:53:59 +02:00
musb	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
phy	USB: PHY: JZ4770: Fix static checker warning.	2020-08-25 16:02:34 +02:00
renesas_usbhs	usb: Use fallthrough pseudo-keyword	2020-07-10 08:55:17 +02:00
roles	usb: roles: Switch on role-switch uevent reporting	2020-05-13 14:20:49 +02:00
serial	USB-serial updates for 5.9-rc1	2020-07-28 17:33:10 +02:00
storage	USB fixes for 5.9-rc3 - take 2	2020-08-30 10:51:03 -07:00
typec	usb: typec: ucsi: acpi: Check the _DEP dependencies	2020-09-04 16:41:22 +02:00
usbip	usbip: Implement a match function to fix usbip	2020-08-18 11:55:23 +02:00
Kconfig	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
Makefile	USB: Changes for v5.4 merge window	2019-09-02 19:20:57 +02:00
usb-skeleton.c	USB: usb-skeleton: drop redundant in-urb check	2019-10-10 12:41:19 +02:00