CKI Backport Bot 53c5bbcd80 rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read ... JIRA: https://issues.redhat.com/browse/RHEL-82456 CVE: CVE-2024-58069 commit 3ab8c5ed4f84fa20cd16794fe8dc31f633fbc70c Author: Oleksij Rempel <linux@rempel-privat.de> Date: Wed Dec 18 20:34:58 2024 +0100 rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read The nvmem interface supports variable buffer sizes, while the regmap interface operates with fixed-size storage. If an nvmem client uses a buffer size less than 4 bytes, regmap_read will write out of bounds as it expects the buffer to point at an unsigned int. Fix this by using an intermediary unsigned int to hold the value. Fixes: fadfd092ee ("rtc: pcf85063: add nvram support") Signed-off-by: Oleksij Rempel <o.rempel@pengutronix.de> Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de> Link: https://lore.kernel.org/r/20241218-rtc-pcf85063-stack-corruption-v1-1-12fd0ee0f046@pengutronix.de Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: CKI Backport Bot <cki-ci-bot+cki-gitlab-backport-bot@redhat.com>		2025-03-06 17:20:22 +00:00
..
Kconfig	rtc: tps6594: Add driver for TPS6594 RTC	2024-07-25 01:10:01 -04:00
Makefile	rtc: tps6594: Add driver for TPS6594 RTC	2024-07-25 01:10:01 -04:00
class.c	driver core: class: remove module * from class_create()	2023-11-01 11:12:29 -05:00
dev.c	…
interface.c	rtc: allow rtc_read_alarm without read_alarm callback	2023-05-30 13:35:14 +10:00
lib.c	…
lib_test.c	rtc: test: Fix invalid format specifier.	2024-07-31 20:32:29 -06:00
nvmem.c	…
proc.c	…
rtc-88pm80x.c	…
rtc-88pm860x.c	…
rtc-ab-b5ze-s3.c	…
rtc-ab-eoz9.c	rtc: ab-eoz9: use IRQ flags obtained from fwnode	2023-05-30 13:35:11 +10:00
rtc-ab8500.c	rtc: ab8500: let the core handle the alarm resolution	2023-05-30 13:34:59 +10:00
rtc-abx80x.c	rtc: abx80x: Add nvmem support	2023-05-30 13:35:14 +10:00
rtc-ac100.c	…
rtc-armada38x.c	…
rtc-as3722.c	…
rtc-asm9260.c	…
rtc-aspeed.c	…
rtc-at91rm9200.c	rtc: at91rm9200: Fix syntax errors in comments	2023-05-30 13:35:10 +10:00
rtc-at91sam9.c	…
rtc-au1xxx.c	…
rtc-bd70528.c	…
rtc-bq32k.c	rtc: Include <linux/kstrtox.h> when appropriate	2023-05-30 13:35:09 +10:00
rtc-bq4802.c	…
rtc-brcmstb-waketimer.c	rtc: brcmstb-waketimer: allow use as non-wake alarm	2023-05-30 13:35:11 +10:00
rtc-cadence.c	…
rtc-cmos.c	rtc: cmos: Use ACPI alarm for non-Intel x86 systems too	2024-02-07 18:16:20 +01:00
rtc-core.h	…
rtc-cpcap.c	…
rtc-cros-ec.c	rtc: cros-ec: Limit RTC alarm range if needed	2023-05-30 13:35:08 +10:00
rtc-da9052.c	…
rtc-da9055.c	…
rtc-da9063.c	rtc: da9063: add as wakeup source	2023-05-30 13:35:00 +10:00
rtc-digicolor.c	…
rtc-dm355evm.c	…
rtc-ds1216.c	…
rtc-ds1286.c	…
rtc-ds1302.c	rtc: ds1302: remove unnecessary spi_set_drvdata()	2023-05-30 13:35:08 +10:00
rtc-ds1305.c	…
rtc-ds1307.c	rtc: ds1307: use sysfs_emit() to instead of scnprintf()	2023-05-30 13:35:10 +10:00
rtc-ds1343.c	…
rtc-ds1347.c	rtc: ds1347: fix value written to century register	2023-05-30 13:35:09 +10:00
rtc-ds1374.c	…
rtc-ds1390.c	…
rtc-ds1511.c	…
rtc-ds1553.c	…
rtc-ds1672.c	…
rtc-ds1685.c	rtc: ds1685: Fix spelling of function name in comment block	2023-05-30 13:35:07 +10:00
rtc-ds1742.c	rtc: ds1742: use devm_platform_get_and_ioremap_resource()	2023-05-30 13:35:10 +10:00
rtc-ds2404.c	…
rtc-ds3232.c	…
rtc-efi.c	rtc: efi: Avoid spamming the log on RTC read failure	2023-05-30 13:35:14 +10:00
rtc-em3027.c	…
rtc-ep93xx.c	…
rtc-fm3130.c	…
rtc-fsl-ftm-alarm.c	rtc: fsl-ftm-alarm: Use module_platform_driver replace device_initcall	2023-05-30 13:35:08 +10:00
rtc-ftrtc010.c	rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe	2023-05-30 13:35:04 +10:00
rtc-gamecube.c	rtc: gamecube: Always reset HW_SRNPROT after read	2023-05-30 13:35:06 +10:00
rtc-generic.c	…
rtc-goldfish.c	clocksource/drivers: Add a goldfish-timer clocksource	2023-05-30 13:35:03 +10:00
rtc-hid-sensor-time.c	…
rtc-hym8563.c	rtc: hym8563: use IRQ flags obtained from fwnode	2023-05-30 13:35:11 +10:00
rtc-imx-sc.c	…
rtc-imxdi.c	…
rtc-isl1208.c	rtc: isl1208: Convert to .probe_new()	2023-05-30 13:35:08 +10:00
rtc-isl12022.c	rtc: isl12022: sort header inclusion alphabetically	2023-05-30 13:35:14 +10:00
rtc-isl12026.c	…
rtc-jz4740.c	rtc: jz4740: Make sure clock provider gets removed	2023-05-30 13:35:15 +10:00
rtc-lp8788.c	…
rtc-lpc24xx.c	…
rtc-lpc32xx.c	…
rtc-ls1x.c	…
rtc-m41t80.c	rtc: m41t80: use IRQ flags obtained from fwnode	2023-05-30 13:35:11 +10:00
rtc-m41t93.c	…
rtc-m41t94.c	…
rtc-m48t35.c	…
rtc-m48t59.c	…
rtc-m48t86.c	…
rtc-max6900.c	…
rtc-max6902.c	…
rtc-max6916.c	…
rtc-max8907.c	rtc: max8907: Drop unused i2c include	2023-05-30 13:35:12 +10:00
rtc-max8925.c	…
rtc-max8997.c	…
rtc-max8998.c	…
rtc-max77686.c	rtc: max77686: Add MAX77714 support	2023-05-30 13:35:01 +10:00
rtc-mc13xxx.c	…
rtc-mc146818-lib.c	rtc: mc146818-lib: reduce RTC_UIP polling period	2023-05-30 13:35:04 +10:00
rtc-mcp795.c	…
rtc-meson-vrtc.c	…
rtc-meson.c	rtc: meson: Fix email address in MODULE_AUTHOR	2023-05-30 13:35:04 +10:00
rtc-moxart.c	rtc: moxart: switch to using gpiod API	2023-05-30 13:35:13 +10:00
rtc-mpc5121.c	rtc: mpc5121: switch to RTC_FEATURE_UPDATE_INTERRUPT	2023-05-30 13:35:02 +10:00
rtc-mpfs.c	rtc: mpfs: Use devm_clk_get_enabled() helper	2023-05-30 13:35:07 +10:00
rtc-msc313.c	rtc: msc313: Fix function prototype mismatch in msc313_rtc_probe()	2023-05-30 13:35:10 +10:00
rtc-msm6242.c	…
rtc-mt2712.c	…
rtc-mt6397.c	rtc: mt6397: check return value after calling platform_get_resource()	2023-05-30 13:35:04 +10:00
rtc-mt7622.c	…
rtc-mv.c	…
rtc-mxc.c	rtc: mxc: Use devm_clk_get_enabled() helper	2023-05-30 13:35:06 +10:00
rtc-mxc_v2.c	rtc: mxc_v2: Add missing clk_disable_unprepare()	2023-05-30 13:35:10 +10:00
rtc-nct3018y.c	rtc: nct3018y: Convert to .probe_new()	2023-05-30 13:35:08 +10:00
rtc-ntxec.c	…
rtc-nxp-bbnsm.c	rtc: bbnsm: Add the bbnsm rtc support	2023-03-29 03:50:01 -04:00
rtc-omap.c	rtc: omap: drop unneeded MODULE_ALIAS	2023-05-30 13:34:58 +10:00
rtc-opal.c	…
rtc-optee.c	…
rtc-palmas.c	…
rtc-pcap.c	…
rtc-pcf2123.c	rtc: pcf2123: use IRQ flags obtained from fwnode	2023-05-30 13:35:11 +10:00
rtc-pcf2127.c	rtc: pcf2127: Convert to .probe_new()	2023-05-30 13:35:08 +10:00
rtc-pcf8523.c	rtc: pcf8523: use IRQ flags obtained from fwnode	2023-05-30 13:35:11 +10:00
rtc-pcf8563.c	rtc: pcf8563: use IRQ flags obtained from fwnode	2023-05-30 13:35:12 +10:00
rtc-pcf8583.c	…
rtc-pcf50633.c	…
rtc-pcf85063.c	rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read	2025-03-06 17:20:22 +00:00
rtc-pcf85363.c	rtc: pcf85363: add support for the quartz-load-femtofarads property	2023-05-30 13:35:14 +10:00
rtc-pic32.c	rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()	2023-05-30 13:35:09 +10:00
rtc-pl030.c	…
rtc-pl031.c	rtc: pl031: fix rtc features null pointer dereference	2023-05-30 13:35:02 +10:00
rtc-pm8xxx.c	rtc: pm8xxx: add support for nvmem offset	2023-05-30 13:35:14 +10:00
rtc-ps3.c	…
rtc-pxa.c	rtc: pxa: fix null pointer dereference	2023-05-30 13:35:01 +10:00
rtc-r7301.c	…
rtc-r9701.c	…
rtc-rc5t583.c	…
rtc-rc5t619.c	…
rtc-rk808.c	rtc: rk808: reduce 'struct rk808' usage	2023-05-30 13:35:10 +10:00
rtc-rp5c01.c	…
rtc-rs5c313.c	rtc: rs5c313: correct some spelling mistakes	2023-05-30 13:35:10 +10:00
rtc-rs5c348.c	…
rtc-rs5c372.c	rtc: remove duplicated words in comments	2023-05-30 13:35:10 +10:00
rtc-rtd119x.c	…
rtc-rv3028.c	rtc: rv3028: add ACPI support	2023-05-30 13:35:14 +10:00
rtc-rv3029c2.c	rtc: rv3029c2: use IRQ flags obtained from fwnode	2023-05-30 13:35:12 +10:00
rtc-rv3032.c	rtc: rv3032: add ACPI support	2023-05-30 13:35:14 +10:00
rtc-rv8803.c	rtc: rv8803: invalidate date/time if alarm time is invalid	2023-05-30 13:35:12 +10:00
rtc-rx4581.c	…
rtc-rx6110.c	rtc: rx6110: Remove unused of_gpio,h	2023-05-30 13:35:14 +10:00
rtc-rx8010.c	rtc: rx8010: use IRQ flags obtained from fwnode	2023-05-30 13:35:12 +10:00
rtc-rx8025.c	rtc: Include <linux/kstrtox.h> when appropriate	2023-05-30 13:35:09 +10:00
rtc-rx8581.c	…
rtc-rzn1.c	rtc: rzn1: Check return value in rzn1_rtc_probe	2023-05-30 13:35:08 +10:00
rtc-s3c.c	rtc: s3c: Switch to use dev_err_probe() helper	2023-05-30 13:35:08 +10:00
rtc-s3c.h	…
rtc-s5m.c	rtc: s5m: drop unneeded MODULE_ALIAS	2023-05-30 13:34:58 +10:00
rtc-s35390a.c	rtc: s35390a: Remove the unneeded result variable	2023-05-30 13:35:09 +10:00
rtc-sa1100.c	…
rtc-sa1100.h	…
rtc-sc27xx.c	…
rtc-sd3078.c	…
rtc-sh.c	…
rtc-snvs.c	rtc: snvs: Allow a time difference on clock register read	2023-05-30 13:35:09 +10:00
rtc-spear.c	rtc: spear: set range max	2023-05-30 13:35:06 +10:00
rtc-st-lpc.c	rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()	2023-05-30 13:35:09 +10:00
rtc-starfire.c	…
rtc-stk17ta8.c	…
rtc-stm32.c	…
rtc-stmp3xxx.c	rtc: stmp3xxx: Add failure handling for stmp3xxx_wdt_register()	2023-05-30 13:35:06 +10:00
rtc-sun4v.c	…
rtc-sun6i.c	rtc: sun6i: Always export the internal oscillator	2023-05-30 13:35:11 +10:00
rtc-sunplus.c	rtc: sunplus: fix format string for printing resource	2023-05-30 13:35:10 +10:00
rtc-sunxi.c	…
rtc-tegra.c	…
rtc-test.c	…
rtc-ti-k3.c	rtc: k3: handle errors while enabling wake irq	2023-05-30 13:35:14 +10:00
rtc-tps6586x.c	…
rtc-tps6594.c	rtc: tps6594: Fix memleak in probe	2024-07-26 11:50:03 -04:00
rtc-tps65910.c	rtc: tps65910: Correct driver module alias	2023-05-30 13:34:57 +10:00
rtc-twl.c	…
rtc-vt8500.c	…
rtc-wilco-ec.c	…
rtc-wm831x.c	…
rtc-wm8350.c	rtc: wm8350: Handle error for wm8350_register_irq	2023-05-30 13:35:02 +10:00
rtc-x1205.c	…
rtc-xgene.c	…
rtc-zynqmp.c	rtc: zynqmp: initialize fract_tick	2023-05-30 13:35:06 +10:00
sysfs.c	rtc: Include <linux/kstrtox.h> when appropriate	2023-05-30 13:35:09 +10:00