redonkable/remarkable-linux
redonkable/remarkable-linux
1
0
Fork 0
Code Releases Activity
remarkable-linux/drivers
History
Ben Hutchings a2e388f253 atl2: Disable unimplemented scatter/gather feature 
[ Upstream commit f43bfaeddc ]

atl2 includes NETIF_F_SG in hw_features even though it has no support
for non-linear skbs.  This bug was originally harmless since the
driver does not claim to implement checksum offload and that used to
be a requirement for SG.

Now that SG and checksum offload are independent features, if you
explicitly enable SG *and* use one of the rare protocols that can use
SG without checkusm offload, this potentially leaks sensitive
information (before you notice that it just isn't working).  Therefore
this obscure bug has been designated CVE-2016-2117.

Reported-by: Justin Yackoski <jyackoski@crypto-nite.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Fixes: ec5f061564 ("net: Kill link between CSUM and SG features.")
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
2016-07-10 23:07:21 -04:00
..
accessibility
acpi ACPI / processor: Request native thermal interrupt handling via _OSC 2016-07-10 23:07:20 -04:00
amba
android drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE 2016-03-07 12:33:19 -05:00
ata scsi: fix race between simultaneous decrements of ->host_failed 2016-07-10 20:19:54 -04:00
atm
auxdisplay auxdisplay: ks0108: fix refcount 2015-09-21 10:05:42 -07:00
base base: make module_create_drivers_dir race-free 2016-07-10 20:19:58 -04:00
bcma Merge branch 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus 2015-04-17 15:50:54 -04:00
block nbd: ratelimit error msgs after socket close 2016-07-10 23:07:17 -04:00
bluetooth Bluetooth: vhci: Fix race at creating hci device 2016-06-03 19:15:30 -04:00
bus bus: imx-weim: Take the 'status' property value into account 2016-04-18 08:50:55 -04:00
cdrom
char tpm: fix the cleanup of struct tpm_chip 2016-07-10 23:06:55 -04:00
clk clk: qcom: msm8960: Fix ce3_src register offset 2016-07-10 23:07:18 -04:00
clocksource clocksource/drivers/vt8500: Increase the minimum delta 2016-02-03 14:01:46 -05:00
connector connector: bump skb->users before callback invocation 2016-01-31 11:23:35 -08:00
cpufreq cpufreq: intel_pstate: Fix ->set_policy() interface for no_turbo 2016-06-18 16:47:30 -04:00
cpuidle cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter() 2016-06-06 19:12:25 -04:00
crypto crypto: ux500 - memmove the right size 2016-07-10 20:19:55 -04:00
dca
devfreq
dio
dma dmaengine: at_xdmac: double FIFO flush needed to compute residue 2016-07-10 20:19:51 -04:00
dma-buf dma-buf: cleanup dma_buf_export() to make it easily extensible 2015-04-21 14:47:16 +05:30
edac EDAC, sb_edac: Fix rank lookup on Broadwell 2016-06-17 15:37:53 -04:00
eisa
extcon extcon: usb-gpio: register extcon device before IRQ registration 2015-04-27 11:06:05 +09:00
firewire firewire: ohci: fix JMicron JMB38x IT context discovery 2015-12-14 21:24:35 -08:00
firmware efi: Expose non-blocking set_variable() wrapper to efivars 2016-07-10 23:07:11 -04:00
fmc
gpio gpio: bcm-kona: fix bcm_kona_gpio_reset() warnings 2016-06-18 16:47:31 -04:00
gpu drm/i915: Cleanup phys status page too 2016-07-10 23:07:10 -04:00
hid HID: logitech: fix Dual Action gamepad support 2016-07-10 23:06:55 -04:00
hsi
hv Drivers: hv: vmbus: Fix signaling logic in hv_need_to_signal_on_read() 2016-05-17 13:42:54 -04:00
hwmon hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated 2016-07-10 23:06:56 -04:00
hwspinlock
hwtracing/coresight coresight: checking for NULL string in coresight_name_match() 2016-02-01 12:22:21 -05:00
i2c i2c: exynos5: Fix possible ABBA deadlock by keeping I2C clock prepared 2016-07-10 23:07:10 -04:00
ide Merge branch 'for-4.1-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata 2015-05-11 10:54:20 -07:00
idle Power management and ACPI updates for v4.1-rc1 2015-04-14 20:21:54 -07:00
iio iio: ak8975: fix maybe-uninitialized warning 2016-07-10 23:07:20 -04:00
infiniband IB/mlx4: Properly initialize GRH TClass and FlowLabel in AHs 2016-07-10 20:19:59 -04:00
input Input: zforce_ts - fix dual touch recognition 2016-07-10 23:07:18 -04:00
iommu iommu/amd: Apply workaround for ATS write permission check 2016-03-09 13:15:09 -05:00
ipack
irqchip irqchip/gic-v3: Configure all interrupts as non-secure Group-1 2016-06-06 19:12:17 -04:00
isdn ppp, slip: Validate VJ compression slot parameters completely 2016-01-31 11:23:37 -08:00
leds leds/led-class: Add missing put_device() 2015-10-22 14:43:14 -07:00
lguest lguest: fix out-by-one error in address checking. 2015-05-27 09:57:21 -07:00
macintosh windfarm: decrement client count when unregistering 2015-10-22 14:43:12 -07:00
mailbox
mcb mcb: Fixed bar number assignment for the gdd 2016-06-03 19:15:44 -04:00
md dm snapshot: disallow the COW and origin devices from being identical 2016-07-10 23:06:54 -04:00
media [media] v4l: vsp1: Set the SRU CTRL0 register when starting the stream 2016-07-10 23:07:08 -04:00
memory memory: omap-gpmc: Fix omap gpmc EXTRADELAY timing 2016-07-10 20:19:58 -04:00
memstick memstick: mspro_block: add missing curly braces 2015-04-17 09:04:09 -04:00
message
mfd mfd: omap-usb-tll: Fix scheduling while atomic BUG 2016-06-06 19:12:14 -04:00
misc drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors 2016-07-10 23:07:14 -04:00
mmc mmc: sdhci-acpi: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers 2016-06-06 19:12:33 -04:00
mtd ubi: Make recover_peb power cut aware 2016-07-10 20:20:01 -04:00
net atl2: Disable unimplemented scatter/gather feature 2016-07-10 23:07:21 -04:00
nfc NFC: st21nfca: fix use of uninitialized variables in error path 2015-09-29 19:25:55 +02:00
ntb ntb: initialize max_mw for Atom before using it 2015-06-11 09:27:24 -04:00
nubus
of of: irq: fix of_irq_get[_byname]() kernel-doc 2016-06-17 15:39:10 -04:00
oprofile Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2015-04-26 17:22:07 -07:00
parisc parisc iommu: fix panic due to trying to allocate too large region 2016-01-31 11:23:39 -08:00
parport
pci PCI: Allow a NULL "parent" pointer in pci_bus_assign_domain_nr() 2016-07-10 22:27:14 -04:00
pcmcia pcmcia: sa11x0: fix missing clk_put() in sa11x0 socket drivers 2015-10-22 14:43:22 -07:00
phy phy: twl4030-usb: Fix unbalanced pm_runtime_enable on module reload 2016-03-04 10:25:40 -05:00
pinctrl pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than ffs 2016-07-10 23:07:10 -04:00
platform ideapad-laptop: Add ideapad Y700 (15) to the no_hw_rfkill DMI list 2016-04-18 08:51:08 -04:00
pnp ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage 2015-08-03 09:29:14 -07:00
power power_supply: power_supply_read_temp only if use_cnt > 0 2016-07-10 20:19:57 -04:00
powercap powercap / RAPL: Add support for Intel Skylake processors 2015-04-15 23:06:16 +02:00
pps
ps3
ptp
pwm pwm: img: Impose upper and lower timebase steps value 2015-05-19 16:07:40 +02:00
rapidio
ras
regulator regulator: s5m8767: fix get_register() error handling 2016-07-10 23:07:12 -04:00
remoteproc
reset
rpmsg
rtc rtc: max77686: Properly handle regmap_irq_get_virq() error code 2016-07-10 23:07:14 -04:00
s390 s390/dasd: fix refcount for PAV reassignment 2016-03-04 10:25:41 -05:00
sbus drivers/sbus/char/envctrl.c: ignore orderly_poweroff return value 2015-04-15 16:35:23 -07:00
scsi lpfc: fix misleading indentation 2016-07-10 23:07:18 -04:00
sfi
sh drivers: sh: Remove test for now unsupported sh7372 2015-04-27 13:08:14 +09:00
sn
soc soc/tegra: pmc: Avoid usage of uninitialized variable 2015-09-21 10:05:43 -07:00
spi spi/rockchip: Make sure spi clk is on in rockchip_spi_set_cs 2016-07-10 23:07:12 -04:00
spmi
ssb SSB: Fix handling of ssb_pmu_get_alp_clock() 2015-06-09 16:38:06 +02:00
staging staging: comedi: das1800: fix possible NULL dereference 2016-06-03 19:15:36 -04:00
target target: Fix target_release_cmd_kref shutdown comp leak 2016-04-18 08:51:06 -04:00
tc
thermal thermal: cpu_cooling: fix improper order during initialization 2016-06-17 09:44:02 -04:00
thunderbolt thunderbolt: Fix double free of drom buffer 2016-06-03 19:15:41 -04:00
tty 8250: use callbacks to access UART_DLL/UART_DLM 2016-07-10 23:06:55 -04:00
uio
usb USB: usbip: fix potential out-of-bounds write 2016-07-10 23:07:12 -04:00
uwb
vfio vfio: fix ioctl error handling 2016-03-09 13:15:13 -05:00
vhost target: Remove first argument of target_{get,put}_sess_cmd() 2016-02-28 00:09:36 -05:00
video fbdev: da8xx-fb: fix videomodes of lcd panels 2016-07-10 23:07:12 -04:00
virt
virtio virtio: virtio 1.0 cs04 spec compliance for reset 2016-04-20 01:08:53 -04:00
vlynq
vme
w1 w1_therm reference count family data 2015-08-03 09:29:11 -07:00
watchdog watchdog: rc32434_wdt: fix ioctl error handling 2016-04-18 08:50:44 -04:00
xen xen/pciback: Fix conf_space read/write overlap check. 2016-07-10 20:20:02 -04:00
zorro
Kconfig
Makefile