diff options
| author | Michael Zimmermann <sigmaepsilon92@gmail.com> | 2026-03-27 20:22:09 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2026-04-22 13:32:18 +0200 |
| commit | 75ecc46828ec377dd5692c677168ef6d64fd7123 (patch) | |
| tree | f6d322e5302032195af3b89f04a7b16c8bb7ef4b /tools/perf/scripts/python/bin/stackcollapse-report | |
| parent | f77f10bc76c2da86b4248269472f6d971e37828b (diff) | |
| download | kernel-75ecc46828ec377dd5692c677168ef6d64fd7123.tar.gz | |
usb: gadget: f_hid: don't call cdev_init while cdev in use
commit 81ebd43cc0d6d106ce7b6ccbf7b5e40ca7f5503d upstream.
When calling unbind, then bind again, cdev_init reinitialized the cdev,
even though there may still be references to it. That's the case when
the /dev/hidg* device is still opened. This obviously unsafe behavior
like oopes.
This fixes this by using cdev_alloc to put the cdev on the heap. That
way, we can simply allocate a new one in hidg_bind.
Closes: https://lore.kernel.org/linux-usb/CAN9vWDKZn0Ts5JyV2_xcAmbnBEi0znMLg_USMFrShRryXrgWGQ@mail.gmail.com/T/#m2cb0dba3633b67b2a679c98499508267d1508881
Cc: stable <stable@kernel.org>
Signed-off-by: Michael Zimmermann <sigmaepsilon92@gmail.com>
Link: https://patch.msgid.link/20260327192209.59945-1-sigmaepsilon92@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-report')
0 files changed, 0 insertions, 0 deletions