linux-kernelorg-stable/drivers/media
Marek Szyprowski 27afd6e066 media: videobuf2: forbid remove_bufs when legacy fileio is active
vb2_ioctl_remove_bufs() call manipulates queue internal buffer list,
potentially overwriting some pointers used by the legacy fileio access
mode. Forbid that ioctl when fileio is active to protect internal queue
state between subsequent read/write calls.

CC: stable@vger.kernel.org
Fixes: a3293a8538 ("media: v4l2: Add REMOVE_BUFS ioctl")
Reported-by: Shuangpeng Bai <SJB7183@psu.edu>
Closes: https://lore.kernel.org/linux-media/5317B590-AAB4-4F17-8EA1-621965886D49@psu.edu/
Signed-off-by: Marek Szyprowski <m.szyprowski@samsung.com>
Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>
2025-10-24 11:16:26 +02:00
..
cec
common media: videobuf2: forbid remove_bufs when legacy fileio is active 2025-10-24 11:16:26 +02:00
dvb-core
dvb-frontends
firewire
i2c [GIT PULL for v6.18] media updates 2025-10-02 13:13:26 -07:00
mc
mmc
pci media: ivtv: Fix invalid access to file * 2025-10-14 15:53:37 +02:00
platform [GIT PULL for v6.18] media updates 2025-10-02 13:13:26 -07:00
radio
rc [GIT PULL for v6.18] media updates 2025-10-02 13:13:26 -07:00
spi
test-drivers
tuners media: tuner: xc5000: Fix use-after-free in xc5000_release 2025-09-17 12:15:35 +02:00
usb media: uvcvideo: Use heuristic to find stream entity 2025-10-24 11:16:26 +02:00
v4l2-core media: v4l2-subdev / pdx86: int3472: Use "privacy" as con_id for the privacy LED 2025-10-24 11:16:26 +02:00
Kconfig
Makefile