Gh0st
/
linux
mirror of https://github.com/torvalds/linux.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
linux/drivers
History
Carlos Llamas ec4ddc90d2 binderfs: fix ida_alloc_max() upper bound 
The 'max' argument of ida_alloc_max() takes the maximum valid ID and not
the "count". Using an ID of BINDERFS_MAX_MINOR (1 << 20) for dev->minor
would exceed the limits of minor numbers (20-bits). Fix this off-by-one
error by subtracting 1 from the 'max'.

Cc: stable@vger.kernel.org
Fixes: 3ad20fe393 ("binder: implement binderfs")
Signed-off-by: Carlos Llamas <cmllamas@google.com>
Link: https://patch.msgid.link/20260127235545.2307876-2-cmllamas@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 		2026-02-03 12:59:07 +01:00
..
accel
…
accessibility
…
acpi ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking 2026-01-13 23:10:25 +01:00
amba
…
android binderfs: fix ida_alloc_max() upper bound 2026-02-03 12:59:07 +01:00
ata ata: libata: Print features also for ATAPI devices 2026-01-13 22:00:02 +09:00
atm atm: Fix dma_free_coherent() size 2026-01-08 08:47:32 -08:00
auxdisplay
…
base Driver core fixes for 6.19-rc7 2026-01-24 10:13:22 -08:00
bcma
…
block block-6.19-20260122 2026-01-23 12:53:56 -08:00
bluetooth
…
bus
…
cache
…
cdrom
…
cdx
…
char
…
clk
…
clocksource riscv: clocksource: Fix stimecmp update hazard on RV32 2026-01-14 17:42:46 -07:00
comedi comedi: dmm32at: serialize use of paged registers 2026-01-16 16:43:51 +01:00
connector
…
counter
…
cpufreq
…
cpuidle
…
crypto
…
cxl cxl: Check for invalid addresses returned from translation functions on errors 2026-01-13 08:30:40 -07:00
dax drivers/dax: add some missing kerneldoc comment fields for struct dev_dax 2026-01-14 22:16:26 -08:00
dca
…
devfreq
…
dibs
…
dio
…
dma dmaengine: apple-admac: Add "apple,t8103-admac" compatible 2026-01-11 22:12:49 +05:30
dma-buf
…
dpll dpll: Prevent duplicate registrations 2026-01-22 08:08:42 -08:00
edac
…
eisa
…
extcon
…
firewire
…
firmware mm: rename cpu_bitmap field to flexible_array 2026-01-19 12:30:00 -08:00
fpga
…
fsi
…
fwctl
…
gnss
…
gpib
…
gpio gpio: shared: propagate configuration to pinctrl 2026-01-21 14:06:17 +01:00
gpu Mediatek DRM Fixes - 20260119 2026-01-23 10:13:12 +10:00
greybus
…
hid hid-for-linus-2026010801 2026-01-08 07:44:48 -08:00
hsi
…
hte
…
hv mshv: handle gpa intercepts for arm64 2026-01-15 07:29:14 +00:00
hwmon
…
hwspinlock
…
hwtracing intel_th: rename error label 2026-01-16 16:42:41 +01:00
i2c i2c-host-fixes for v6.19-rc7 2026-01-24 12:56:53 +01:00
i3c
…
idle
…
iio iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source 2026-01-11 13:25:15 +00:00
infiniband
…
input Input updates for v6.19-rc6 2026-01-25 09:42:25 -08:00
interconnect interconnect: debugfs: initialize src_node and dst_node to empty strings 2026-01-12 01:58:36 +02:00
iommu IOMMU Fixes for Linux v6.19-rc6 2026-01-23 12:46:12 -08:00
ipack
…
irqchip irqchip/gic-v3-its: Avoid truncating memory addresses 2026-01-20 10:11:29 +01:00
isdn mISDN: annotate data-race around dev->work 2026-01-20 18:37:41 -08:00
leds leds: led-class: Only Add LED to leds_list when it is fully ready 2026-01-20 16:02:01 +00:00
macintosh
…
mailbox
…
mcb
…
md block-6.19-20260122 2026-01-23 12:53:56 -08:00
media [GIT PULL for v6.19-rc6] media fixes 2026-01-14 08:18:01 -08:00
memory
…
memstick
…
message
…
mfd
…
misc mei: trace: treat reg parameter as string 2026-01-16 16:43:47 +01:00
mmc mmc: sdhci-of-dwcmshc: Fix DMA 128MB boundary for Eswin EIC7700 2026-01-22 13:26:08 +01:00
most
…
mtd treewide: Update email address 2026-01-11 06:09:11 -10:00
mux mux: mmio: Fix IS_ERR() vs NULL check in probe() 2026-01-16 16:42:08 +01:00
net Octeontx2-af: Add proper checks for fwdata 2026-01-22 08:09:00 -08:00
nfc Revert "nfc/nci: Add the inconsistency check between the input data length and count" 2026-01-17 18:02:50 -08:00
ntb ntb: transport: Fix uninitialized mutex 2026-01-17 11:57:39 -05:00
nubus
…
nvdimm
…
nvme block-6.19-20260116 2026-01-16 20:59:46 -08:00
nvmem
…
of of: fix reference count leak in of_alias_scan() 2026-01-17 10:20:43 -06:00
opp
…
parisc
…
parport
…
pci pci-v6.19-fixes-4 2026-01-23 13:20:24 -08:00
pcmcia
…
peci
…
perf
…
phy phy: freescale: imx8m-pcie: assert phy reset during power on 2026-01-14 21:44:39 +05:30
pinctrl
…
platform platform/x86: acer-wmi: Fix missing capability check 2026-01-20 17:10:56 +02:00
pmdomain pmdomain providers: 2026-01-23 13:12:49 -08:00
pnp
…
power
…
powercap
…
pps
…
ps3
…
ptp
…
pwm pwm: max7360: Populate missing .sizeof_wfhw in max7360_pwm_ops 2026-01-19 18:31:05 +01:00
rapidio
…
ras
…
regulator regulator: fp9931: Add missing memory allocation check 2026-01-19 14:42:02 +00:00
remoteproc
…
resctrl arm_mpam: Use non-atomic bitops when modifying feature bitmap 2026-01-16 12:04:20 +00:00
reset
…
rpmsg
…
rtc
…
s390 s390/ap: Fix wrong APQN fill calculation 2026-01-20 14:33:42 +01:00
sbus
…
scsi scsi: qla2xxx: Sanitize payload size to prevent member overflow 2026-01-16 23:08:11 -05:00
sh
…
siox
…
slimbus slimbus: core: clean up of_slim_get_device() 2026-01-16 16:43:05 +01:00
soc soc: renesas: Fix missing dependency on new CONFIG_CACHEMAINT_FOR_DMA 2026-01-15 18:13:33 -07:00
soundwire soundwire fix for 6.19 2026-01-18 12:29:12 -08:00
spi spi: intel-pci: Add support for Nova Lake SPI serial flash 2026-01-15 14:21:29 +00:00
spmi
…
ssb
…
staging
…
target scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() 2026-01-16 23:02:15 -05:00
tc
…
tee
…
thermal
…
thunderbolt
…
tty serial: Fix not set tty->port race condition 2026-01-23 17:23:09 +01:00
ufs
…
uio uio: pci_sva: correct '-ENODEV' check logic 2026-01-16 16:43:43 +01:00
usb xhci: sideband: don't dereference freed ring when removing sideband endpoint 2026-01-16 12:19:37 +01:00
vdpa
…
vfio
…
vhost
…
video
…
virt
…
virtio
…
w1
…
watchdog
…
xen SCSI fixes on 20260125 2026-01-25 12:06:15 -08:00
zorro
…
Kconfig
…
Makefile
…