The following changes since commit 50c4c4e268a2d7a3e58ebb698ac74da0de40ae36: Linux 4.15-rc3 (2017-12-10 17:56:26 -0800) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git/ tags/usb-4.15-rc4 for you to fetch changes up to 48a4ff1c7bb5a32d2e396b03132d20d552c0eca7: USB: core: prevent malicious bNumInterfaces overflow (2017-12-13 12:28:43 +0100) ---------------------------------------------------------------- USB fixes for 4.15-rc4 Here are some USB fixes for 4.15-rc4. There is the usual handful gadget/dwc2/dwc3 fixes as always, for reported issues. But the most important things in here is the core fix from Alan Stern to resolve a nasty security bug (my first attempt is reverted, Alan's was much cleaner), as well as a number of usbip fixes from Shuah Khan to resolve those reported security issues. All of these have been in linux-next with no reported issues. Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> ---------------------------------------------------------------- Alan Stern (1): USB: core: prevent malicious bNumInterfaces overflow Andreas Platschek (1): usb: dwc3: of-simple: fix missing clk_disable_unprepare Andrey Konovalov (1): USB: core: only clean up what we allocated Arnd Bergmann (1): usb: gadget: webcam: fix V4L2 Kconfig dependency Bin Liu (1): usb: musb: da8xx: fix babble condition handling Chunfeng Yun (1): usb: xhci: fix TDS for MTK xHCI1.1 David Kozub (1): USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID Felipe Balbi (1): Revert "usb: gadget: allow to enable legacy drivers without USB_ETH" Greg Kroah-Hartman (2): Merge tag 'fixes-for-v4.15-rc4' of git://git.kernel.org/.../balbi/usb into usb-linus Revert "USB: core: only clean up what we allocated" Julien BOIBESSOT (1): tools/usbip: fixes potential (minor) "buffer overflow" (detected on recent gcc with -Werror) Manu Gautam (1): usb: dwc3: gadget: Fix PCM1 for ISOC EP with ep->mult less than 3 Masahiro Yamada (1): usb: dwc3: of-simple: set dev_pm_ops Mathias Nyman (1): xhci: Don't add a virt_dev to the devs array before it's fully allocated Minas Harutyunyan (1): usb: dwc2: Fix TxFIFOn sizes and total TxFIFO size issues Shuah Khan (4): usbip: fix stub_rx: get_pipe() to validate endpoint number usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input usbip: prevent vhci_hcd driver from leaking a socket pointer address usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer Vincent Pelletier (1): usb: dwc3: gadget: Wait longer for controller to end command processing drivers/usb/core/config.c | 4 ++- drivers/usb/dwc2/core.h | 4 +++ drivers/usb/dwc2/gadget.c | 42 ++--------------------------- drivers/usb/dwc2/params.c | 29 +++++++++++++------- drivers/usb/dwc3/dwc3-of-simple.c | 5 +++- drivers/usb/dwc3/gadget.c | 4 +-- drivers/usb/gadget/Kconfig | 4 +-- drivers/usb/gadget/legacy/Kconfig | 12 +-------- drivers/usb/host/xhci-mem.c | 15 ++++++++--- drivers/usb/host/xhci-ring.c | 6 ++--- drivers/usb/musb/da8xx.c | 10 ++++++- drivers/usb/storage/unusual_devs.h | 7 +++++ drivers/usb/storage/unusual_uas.h | 7 +++++ drivers/usb/usbip/stub_rx.c | 51 +++++++++++++++++++++++++++++------- drivers/usb/usbip/stub_tx.c | 7 +++++ drivers/usb/usbip/usbip_common.h | 1 + drivers/usb/usbip/vhci_sysfs.c | 25 +++++++++++------- tools/usb/usbip/libsrc/vhci_driver.c | 10 +++---- 18 files changed, 144 insertions(+), 99 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe linux-usb" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html