diff options
| author | Johan Hovold <[email protected]> | 2025-10-29 09:30:29 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2025-11-09 02:15:20 +0000 |
| commit | baadf2a5c26e802a46573eaad331b427b49aaa36 (patch) | |
| tree | 3566a22946002c3de9b3ad638a21e389ac857e97 /scripts/basic/docproc.c | |
| parent | slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves (diff) | |
| download | kernel-baadf2a5c26e802a46573eaad331b427b49aaa36.tar.gz kernel-baadf2a5c26e802a46573eaad331b427b49aaa36.zip | |
most: usb: fix double free on late probe failure
The MOST subsystem has a non-standard registration function which frees
the interface on registration failures and on deregistration.
This unsurprisingly leads to bugs in the MOST drivers, and a couple of
recent changes turned a reference underflow and use-after-free in the
USB driver into several double free and a use-after-free on late probe
failures.
Fixes: 723de0f9171e ("staging: most: remove device from interface structure")
Fixes: 4b1270902609 ("most: usb: Fix use-after-free in hdm_disconnect")
Fixes: a8cc9e5fcb0e ("most: usb: hdm_probe: Fix calling put_device() before device initialization")
Cc: [email protected]
Cc: Christian Gromm <[email protected]>
Cc: Victoria Votokina <[email protected]>
Signed-off-by: Johan Hovold <[email protected]>
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'scripts/basic/docproc.c')
0 files changed, 0 insertions, 0 deletions