On 12 July 2016 at 12:07, Ulf Hansson <ulf.hansson@xxxxxxxxxx> wrote: > + stable > > On 8 July 2016 at 17:27, Ville Viinikka <ville@xxxxxxxxxx> wrote: >> Set 'idata->buf' to NULL so that it never gets returned without >> initialization. This fixes a bug where mmc_blk_ioctl_cmd() would >> free both 'idata' and 'idata->buf' but 'idata->buf' was returned >> uninitialized. >> >> Fixes: 1ff8950c0433 ("mmc: block: change to use kmalloc when copy data from userspace") >> Signed-off-by: Ville Viinikka <ville@xxxxxxxxxx> > > I added a stable tag to this and applied it for next! Moved this to fixes! Kind regards Uffe -- To unsubscribe from this list: send the line "unsubscribe linux-mmc" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html