torvalds/linux
3
0
Fork 0
mirror of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-03-22 07:27:12 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
linux/drivers/usb/host
History
Mathias Nyman ae4ff9dead xhci: Fix NULL pointer dereference when reading portli debugfs files 
Michal reported and debgged a NULL pointer dereference bug in the
recently added portli debugfs files

Oops is caused when there are more port registers counted in
xhci->max_ports than ports reported by Supported Protocol capabilities.
This is possible if max_ports is more than maximum port number, or
if there are gaps between ports of different speeds the 'Supported
Protocol' capabilities.

In such cases port->rhub will be NULL so we can't reach xhci behind it.
Add an explicit NULL check for this case, and print portli in hex
without dereferencing port->rhub.

Reported-by: Michal Pecio <michal.pecio@gmail.com>
Closes: https://lore.kernel.org/linux-usb/20260304103856.48b785fd.michal.pecio@gmail.com
Fixes: 384c57ec72 ("usb: xhci: Add debugfs support for xHCI Port Link Info (PORTLI) register.")
Cc: stable@vger.kernel.org
Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>
Link: https://patch.msgid.link/20260304223639.3882398-4-mathias.nyman@linux.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2026-03-11 16:18:48 +01:00
..
bcma-hcd.c
USB: bcma: Remove unused of_gpio.h
2024-11-04 01:27:52 +01:00
ehci-atmel.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-brcm.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-dbg.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
ehci-exynos.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-fsl.c
usb: ehci-fsl: Fix use of private data to avoid -Wflex-array-member-not-at-end warning
2025-04-11 16:08:33 +02:00
ehci-fsl.h
…
ehci-grlib.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-hcd.c
USB: HCD: remove logic about which hcd is loaded
2026-01-14 15:59:00 +01:00
ehci-hub.c
usb: ehci: add workaround for chipidea PORTSC.PEC bug
2023-08-09 14:16:06 +02:00
ehci-mem.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
ehci-mv.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-npcm7xx.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-omap.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-orion.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-pci.c
PCI: Add ASPEED vendor ID to pci_ids.h
2026-01-09 14:21:16 -06:00
ehci-platform.c
usb: host: ehci-platform: Call reset assert/deassert on suspend/resume
2025-11-21 15:11:22 +01:00
ehci-ppc-of.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-ps3.c
…
ehci-q.c
USB: Use EHCI control transfer pid macros instead of constant values.
2024-03-26 10:43:35 +01:00
ehci-sched.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
ehci-sh.c
usb: ehci-hcd: fix call balance of clocks handling routines
2024-12-04 16:25:13 +01:00
ehci-spear.c
usb: ehci-spear: fix call balance of sehci clk handling routines
2024-11-16 09:04:06 +01:00
ehci-st.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci-sysfs.c
usb: ehci: replace scnprintf() with sysfs_emit()
2025-06-24 15:40:19 +01:00
ehci-timer.c
…
ehci-xilinx-of.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ehci.h
USB: Use EHCI control transfer pid macros instead of constant values.
2024-03-26 10:43:35 +01:00
fhci-dbg.c
…
fhci-hcd.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
fhci-hub.c
…
fhci-mem.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
fhci-q.c
…
fhci-sched.c
usb: host: fix typo in the comment
2024-10-04 15:08:37 +02:00
fhci-tds.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
fhci.h
…
fsl-mph-dr-of.c
usb: fsl-mph-dr-of: Remove unnecessary NULL check before clk_disable_unprepare()
2025-06-19 12:27:29 +02:00
isp116x-hcd.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
isp116x.h
…
Kconfig
USB: host: drop unneeded dependency on OF_GPIO
2026-01-07 16:14:11 +01:00
Makefile
usb: isp1362-hcd: remove Philips ISP1362 USB OTG controller driver
2026-01-07 16:13:19 +01:00
max3421-hcd.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
octeon-hcd.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
octeon-hcd.h
…
ohci-at91.c
usb: ohci-at91: Use dynamic device name for OHCI HCD creation
2025-06-19 12:27:33 +02:00
ohci-da8xx.c
usb: ohci-da8xx: remove unused platform data
2025-11-21 15:13:56 +01:00
ohci-dbg.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
ohci-exynos.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ohci-hcd.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
ohci-hub.c
treewide: Switch/rename to timer_delete[_sync]()
2025-04-05 10:30:12 +02:00
ohci-mem.c
…
ohci-nxp.c
usb: ohci-nxp: clean up probe error labels
2025-12-23 15:48:46 +01:00
ohci-omap.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ohci-pci.c
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
2025-04-11 16:21:20 +02:00
ohci-platform.c
USB: OHCI/UHCI: Add soft dependencies on ehci_platform
2026-01-14 16:02:14 +01:00
ohci-ppc-of.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ohci-ps3.c
…
ohci-pxa27x.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ohci-q.c
…
ohci-s3c2410.c
usb: ohci: s3c2410: Drop support for S3C2410 systems
2025-09-06 15:22:51 +02:00
ohci-sa1111.c
…
ohci-sm501.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ohci-spear.c
usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare()
2025-06-19 12:27:26 +02:00
ohci-st.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
ohci.h
usb: Annotate struct urb_priv with __counted_by
2023-10-02 09:48:52 -07:00
oxu210hp-hcd.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
pci-quirks.c
USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
2025-02-14 09:18:14 +01:00
pci-quirks.h
usb: pci-quirks: handle HAS_IOPORT dependency for AMD quirk
2023-10-02 16:19:12 +02:00
r8a66597-hcd.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
r8a66597.h
…
sl811_cs.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
sl811-hcd.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
sl811.h
…
ssb-hcd.c
…
uhci-debug.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
uhci-grlib.c
usb: Switch back to struct platform_driver::remove()
2024-10-04 15:13:03 +02:00
uhci-hcd.c
Convert more 'alloc_obj' cases to default GFP_KERNEL arguments
2026-02-21 20:03:00 -08:00
uhci-hcd.h
usb: uhci: Add reset control support
2025-10-13 09:11:49 +02:00
uhci-hub.c
…
uhci-pci.c
…
uhci-platform.c
USB: OHCI/UHCI: Add soft dependencies on ehci_platform
2026-01-14 16:02:14 +01:00
uhci-q.c
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
xen-hcd.c
xen/usb: Constify struct hc_driver
2025-10-28 15:35:15 +01:00
xhci-caps.h
usb: xhci: Add debugfs support for xHCI Port Link Info (PORTLI) register.
2025-11-21 14:53:01 +01:00
xhci-dbg.c
…
xhci-dbgcap.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
xhci-dbgcap.h
xhci: dbc: prepare to expose strings through sysfs
2026-01-23 17:16:24 +01:00
xhci-dbgtty.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
xhci-debugfs.c
xhci: Fix NULL pointer dereference when reading portli debugfs files
2026-03-11 16:18:48 +01:00
xhci-debugfs.h
…
xhci-ext-caps.c
…
xhci-ext-caps.h
xhci: Add USB4 tunnel detection for USB3 devices on Intel hosts
2024-09-03 09:54:39 +02:00
xhci-histb.c
usb: xhci: change xhci_resume() parameters to explicit the desired info
2025-03-14 09:18:02 +01:00
xhci-hub.c
usb: xhci: standardize single bit-field macros
2025-11-21 14:53:01 +01:00
xhci-mem.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
xhci-mtk-sch.c
Convert more 'alloc_obj' cases to default GFP_KERNEL arguments
2026-02-21 20:03:00 -08:00
xhci-mtk.c
usb: Remove redundant pm_runtime_mark_last_busy() calls
2025-11-21 15:11:53 +01:00
xhci-mtk.h
usb: xhci-mtk: correct most kernel-doc problems in xhci-mtk.h
2025-11-21 14:52:37 +01:00
xhci-mvebu.c
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
2025-03-14 09:18:02 +01:00
xhci-mvebu.h
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
2025-03-14 09:18:02 +01:00
xhci-pci-renesas.c
usb: renesas-xhci: Fix External ROM access timeouts
2025-08-13 17:15:59 +02:00
xhci-pci.c
usb: xhci: simplify handling of Structural Parameters 1 values
2025-11-21 14:53:00 +01:00
xhci-pci.h
xhci-pci: Make xhci-pci-renesas a proper modular driver
2024-08-07 12:51:38 +02:00
xhci-plat.c
usb: host: xhci-plat: Add .post_resume_quirk for struct xhci_plat_priv
2025-09-17 12:43:17 +02:00
xhci-plat.h
usb: host: xhci-plat: Add .post_resume_quirk for struct xhci_plat_priv
2025-09-17 12:43:17 +02:00
xhci-port.h
usb: xhci: Add debugfs support for xHCI Port Link Info (PORTLI) register.
2025-11-21 14:53:01 +01:00
xhci-rcar-regs.h
usb: host: xhci-rcar: Move R-Car reg definitions
2025-09-17 12:43:16 +02:00
xhci-rcar.c
usb: host: xhci-rcar: Add Renesas RZ/G3E USB3 Host driver support
2025-09-17 12:43:18 +02:00
xhci-ring.c
usb: xhci: Prevent interrupt storm on host controller error (HCE)
2026-03-11 16:18:48 +01:00
xhci-rzg3e-regs.h
usb: host: xhci-rcar: Add Renesas RZ/G3E USB3 Host driver support
2025-09-17 12:43:18 +02:00
xhci-rzv2m.c
usb: xhci-plat: Don't include xhci.h
2024-04-23 16:25:29 -07:00
xhci-rzv2m.h
…
xhci-sideband.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
xhci-tegra.c
usb: host: tegra: Remove manual wake IRQ disposal
2026-01-23 17:15:54 +01:00
xhci-trace.c
…
xhci-trace.h
usb: xhci: standardize single bit-field macros
2025-11-21 14:53:01 +01:00
xhci.c
usb: xhci: Fix memory leak in xhci_disable_slot()
2026-03-11 16:18:48 +01:00
xhci.h
usb: xhci: limit number of interrupts to 128
2025-11-21 14:53:00 +01:00