These four patches harden virtio-mem, virtio_input, and virtio_console against untrusted values coming from the device/backend side of the virtio interface. The fourth fixes a use-after-free in virtio_console caused by a missing refcount.
Hari Mishal (4): virtio-mem: validate device-reported block size virtio_input: validate device-reported multitouch slot count virtio_console: avoid NULL portdev dereference in in_intr() virtio_console: take a kref in find_port_by_vq() to fix port UAF drivers/char/virtio_console.c | 18 +++++++++++++++++- drivers/virtio/virtio_input.c | 4 ++++ drivers/virtio/virtio_mem.c | 7 +++++++ 3 files changed, 28 insertions(+), 1 deletion(-) -- 2.43.0
