[PATCH 1/3] firmware: arm_scmi: imx: Track copied syslog words
Sudeep Holla
sudeep.holla at kernel.org
Mon Nov 2 08:17:39 PST 2026
On Wed, 28 Oct 2026 13:05:00 +0000, Sudeep Holla wrote:
> The MISC syslog iterator records the number of returned words plus
> firmware-reported remaining words in the caller's size output.
>
> The debugfs consumer uses that value to dump its fixed-size buffer. A
> malformed or inconsistent response can therefore make it read beyond
> the copied data and allocation.
>
> [...]
Applied to sudeep.holla/linux (for-next/scmi/fixes), thanks!
[1/3] firmware: arm_scmi: imx: Track copied syslog words
https://git.kernel.org/sudeep.holla/c/3baf579ba766
[2/3] firmware: arm_scmi: imx: Validate MISC control response size
https://git.kernel.org/sudeep.holla/c/4e3652a0ac71
[3/3] firmware: arm_scmi: Unregister notifier on enable failure
https://git.kernel.org/sudeep.holla/c/b9bb2eb88037
--
Regards,
Sudeep
More information about the linux-arm-kernel
mailing list