umber-kernel/drivers/hid
Günther Noack 1acb28123e HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
[ Upstream commit 1547d41f9f19d691c2c9ce4c29f746297baef9e9 ]

Do not crash when a report has no fields.

Fake USB gadgets can send their own HID report descriptors and can define report
structures without valid fields.  This can be used to crash the kernel over USB.

Cc: stable@vger.kernel.org
Signed-off-by: Günther Noack <gnoack@google.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2026-03-04 07:21:00 -05:00
..
amd-sfh-hid HID: amd_sfh: Stop sensor before starting 2025-10-30 11:58:41 +01:00
bpf
i2c-hid HID: i2c-hid: Add FocalTech FT8112 2026-03-04 07:20:31 -05:00
intel-ish-hid HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients 2026-02-26 14:59:14 -08:00
intel-thc-hid HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer 2026-02-11 13:41:49 +01:00
surface-hid
usbhid HID: pidff: Do not set out of range trigger button 2026-03-04 07:19:54 -05:00
.kunitconfig
Kconfig HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK 2026-03-04 07:20:03 -05:00
Makefile HID: haptic: introduce hid_haptic_device 2025-09-15 14:32:54 +02:00
hid-a4tech.c
hid-accutouch.c
hid-alps.c
hid-apple.c HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards 2026-03-04 07:19:54 -05:00
hid-appleir.c treewide, timers: Rename from_timer() to timer_container_of() 2025-06-08 09:07:37 +02:00
hid-appletb-bl.c
hid-appletb-kbd.c Merge branch 'for-6.17/amd-sfh' into for-linus 2025-07-31 22:36:25 +02:00
hid-asus.c Merge branch 'for-6.18/asus' into for-linus 2025-09-30 16:45:07 +02:00
hid-aureal.c
hid-axff.c
hid-belkin.c
hid-betopff.c
hid-bigbenff.c
hid-cherry.c
hid-chicony.c
hid-cmedia.c
hid-core.c HID: bpf: rescan the device for the group after a load/unload 2025-09-12 17:11:55 +02:00
hid-corsair-void.c HID: corsair-void: Use %pe for printing PTR_ERR 2025-11-18 18:03:48 +01:00
hid-corsair.c
hid-cougar.c
hid-cp2112.c HID: cp2112: Add parameter validation to data length 2025-10-14 11:46:49 +02:00
hid-creative-sb0540.c
hid-cypress.c
hid-debug.c HID: hid-debug: Fix spelling mistake "Rechargable" -> "Rechargeable" 2025-10-14 12:56:28 +02:00
hid-dr.c
hid-elan.c
hid-elecom.c HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK 2026-03-04 07:20:03 -05:00
hid-elo.c
hid-emsff.c
hid-evision.c
hid-ezkey.c
hid-ft260.c
hid-gaff.c
hid-gembird.c
hid-generic.c
hid-gfrm.c
hid-glorious.c
hid-goodix-spi.c
hid-google-hammer.c
hid-google-stadiaff.c
hid-gt683r.c
hid-gyration.c
hid-haptic.c Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD 2025-11-17 23:18:32 -08:00
hid-haptic.h HID: multitouch: add haptic multitouch support 2025-09-15 14:32:55 +02:00
hid-holtek-kbd.c
hid-holtek-mouse.c
hid-holtekff.c
hid-hyperv.c
hid-icade.c
hid-ids.h HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK 2026-03-04 07:20:03 -05:00
hid-input-test.c HID: input: rename hidinput_set_battery_charge_status() 2025-08-20 20:03:39 +02:00
hid-input.c HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen 2026-01-02 12:56:55 +01:00
hid-ite.c
hid-jabra.c
hid-kensington.c
hid-keytouch.c
hid-kye.c
hid-kysona.c
hid-lcpower.c
hid-led.c
hid-lenovo.c HID: lenovo: fixup Lenovo Yoga Slim 7x Keyboard rdesc 2025-10-30 11:40:52 +01:00
hid-letsketch.c treewide, timers: Rename from_timer() to timer_container_of() 2025-06-08 09:07:37 +02:00
hid-lg-g15.c
hid-lg.c
hid-lg.h
hid-lg2ff.c
hid-lg3ff.c
hid-lg4ff.c HID: replace scnprintf() with sysfs_emit() 2025-06-20 09:14:43 +02:00
hid-lg4ff.h
hid-lgff.c
hid-logitech-dj.c HID: logitech-dj: Remove duplicate error logging 2026-01-08 10:16:56 +01:00
hid-logitech-hidpp.c HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() 2026-03-04 07:21:00 -05:00
hid-macally.c
hid-magicmouse.c HID: magicmouse: Do not crash on missing msc->input 2026-03-04 07:20:59 -05:00
hid-maltron.c
hid-mcp2200.c treewide: rename GPIO set callbacks back to their original names 2025-08-07 10:07:06 +02:00
hid-mcp2221.c hid-for-linus-2025082901 2025-08-29 07:44:14 -07:00
hid-megaworld.c
hid-mf.c
hid-microsoft.c
hid-monterey.c
hid-multitouch.c HID: multitouch: add eGalaxTouch EXC3188 support 2026-03-04 07:20:02 -05:00
hid-nintendo.c HID: nintendo: Rate limit IMU compensation message 2025-10-14 11:57:40 +02:00
hid-nti.c
hid-ntrig.c HID: hid-ntrig: Prevent memory leak in ntrig_report_version() 2025-10-31 09:57:10 +01:00
hid-nvidia-shield.c
hid-ortek.c
hid-penmount.c
hid-petalynx.c
hid-picolcd.h
hid-picolcd_backlight.c
hid-picolcd_cir.c
hid-picolcd_core.c
hid-picolcd_debugfs.c
hid-picolcd_fb.c
hid-picolcd_lcd.c
hid-picolcd_leds.c
hid-pl.c HID: hid-pl: handle probe errors 2026-03-04 07:20:59 -05:00
hid-plantronics.c
hid-playstation.c HID: playstation: Add missing check for input_ff_create_memless 2026-02-26 14:59:12 -08:00
hid-primax.c
hid-prodikeys.c HID: prodikeys: Check presence of pm->input_ep82 2026-03-04 07:20:59 -05:00
hid-pxrc.c
hid-quirks.c HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK 2026-03-04 07:20:03 -05:00
hid-razer.c
hid-redragon.c
hid-retrode.c
hid-rmi.c
hid-roccat-arvo.c sysfs: treewide: switch back to attribute_group::bin_attrs 2025-06-17 10:44:15 +02:00
hid-roccat-arvo.h
hid-roccat-common.c
hid-roccat-common.h sysfs: treewide: switch back to bin_attribute::read()/write() 2025-06-17 10:44:13 +02:00
hid-roccat-isku.c sysfs: treewide: switch back to attribute_group::bin_attrs 2025-06-17 10:44:15 +02:00
hid-roccat-isku.h
hid-roccat-kone.c sysfs: treewide: switch back to attribute_group::bin_attrs 2025-06-17 10:44:15 +02:00
hid-roccat-kone.h
hid-roccat-koneplus.c sysfs: treewide: switch back to attribute_group::bin_attrs 2025-06-17 10:44:15 +02:00
hid-roccat-koneplus.h
hid-roccat-konepure.c sysfs: treewide: switch back to attribute_group::bin_attrs 2025-06-17 10:44:15 +02:00
hid-roccat-kovaplus.c sysfs: treewide: switch back to attribute_group::bin_attrs 2025-06-17 10:44:15 +02:00
hid-roccat-kovaplus.h
hid-roccat-lua.c sysfs: treewide: switch back to bin_attribute::read()/write() 2025-06-17 10:44:13 +02:00
hid-roccat-lua.h
hid-roccat-pyra.c sysfs: treewide: switch back to attribute_group::bin_attrs 2025-06-17 10:44:15 +02:00
hid-roccat-pyra.h
hid-roccat-ryos.c sysfs: treewide: switch back to attribute_group::bin_attrs 2025-06-17 10:44:15 +02:00
hid-roccat-savu.c sysfs: treewide: switch back to attribute_group::bin_attrs 2025-06-17 10:44:15 +02:00
hid-roccat-savu.h
hid-roccat.c
hid-saitek.c
hid-samsung.c
hid-semitek.c
hid-sensor-custom.c
hid-sensor-hub.c
hid-sigmamicro.c
hid-sjoy.c
hid-sony.c treewide, timers: Rename from_timer() to timer_container_of() 2025-06-08 09:07:37 +02:00
hid-speedlink.c
hid-steam.c HID: hid-steam: Use new BTN_GRIP* buttons 2025-08-06 10:02:28 -07:00
hid-steelseries.c HID: steelseries: Fix STEELSERIES_SRWS1 handling in steelseries_remove() 2025-09-12 16:27:35 +02:00
hid-sunplus.c
hid-thrustmaster.c
hid-tivo.c
hid-tmff.c
hid-topre.c
hid-topseed.c
hid-twinhan.c
hid-u2fzero.c
hid-uclogic-core-test.c
hid-uclogic-core.c Merge branch 'for-6.17/uclogic' into for-linus 2025-07-31 22:54:15 +02:00
hid-uclogic-params-test.c
hid-uclogic-params.c HID: uclogic: Fix potential memory leak in error path 2025-11-18 18:08:20 +01:00
hid-uclogic-params.h HID: uclogic: Add support for XP-PEN Artist 22R Pro 2025-07-03 09:33:38 +02:00
hid-uclogic-rdesc-test.c
hid-uclogic-rdesc.c HID: uclogic: Add support for XP-PEN Artist 22R Pro 2025-07-03 09:33:38 +02:00
hid-uclogic-rdesc.h HID: uclogic: Add support for XP-PEN Artist 22R Pro 2025-07-03 09:33:38 +02:00
hid-udraw-ps3.c
hid-universal-pidff.c HID: universal-pidff: clang-format pass 2025-08-15 15:58:10 +02:00
hid-viewsonic.c
hid-vivaldi-common.c
hid-vivaldi-common.h
hid-vivaldi.c
hid-vrc2.c
hid-waltop.c
hid-wiimote-core.c treewide, timers: Rename from_timer() to timer_container_of() 2025-06-08 09:07:37 +02:00
hid-wiimote-debug.c
hid-wiimote-modules.c
hid-wiimote.h
hid-winwing.c
hid-xiaomi.c
hid-xinmo.c
hid-zpff.c
hid-zydacron.c
hidraw.c HID: hidraw: tighten ioctl command parsing 2025-09-17 11:37:23 +02:00
uhid.c
wacom.h
wacom_sys.c HID: wacom: fix crash in wacom_aes_battery_handler() 2025-06-11 00:27:10 +02:00
wacom_wac.c HID: wacom: Add a new Art Pen 2 2025-08-12 14:56:35 +02:00
wacom_wac.h