[PATCH 0/4] virtio: validate device-reported values across drivers
Hari Mishal <[email protected]>
| Newsgroups | dev.linux.lists.virtualization,org.kernel.vger.linux-input,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
These four patches harden virtio-mem, virtio_input, and virtio_console against untrusted values coming from the device/backend side of the virtio interface. The fourth fixes a use-after-free in virtio_console caused by a missing refcount. Hari Mishal (4): virtio-mem: validate device-reported block size virtio_input: validate device-reported multitouch slot count virtio_console: avoid NULL portdev dereference in in_intr() virtio_console: take a kref in find_port_by_vq() to fix port UAF drivers/char/virtio_console.c | 18 +++++++++++++++++- drivers/virtio/virtio_input.c | 4 ++++ drivers/virtio/virtio_mem.c | 7 +++++++ 3 files changed, 28 insertions(+), 1 deletion(-) -- 2.43.0