Re: [PATCH] HID: hid-steam: Fix use-after-free when detaching device

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 27 Feb 2025, Vicki Pfau wrote:

> When a hid-steam device is removed it must clean up the client_hdev used for
> intercepting hidraw access. This can lead to scheduling deferred work to
> reattach the input device. Though the cleanup cancels the deferred work, this
> was done before the client_hdev itself is cleaned up, so it gets rescheduled.
> This patch fixes the ordering to make sure the deferred work is properly
> canceled.
> 
> Reported-by: syzbot+0154da2d403396b2bd59@xxxxxxxxxxxxxxxxxxxxxxxxx
> Fixes: 79504249d7e2 ("HID: hid-steam: Move hidraw input (un)registering to work")
> Signed-off-by: Vicki Pfau <vi@xxxxxxxxxxx>

Applied to hid.git#for-6.14/upstream-fixes. Thanks,

-- 
Jiri Kosina
SUSE Labs





[Index of Archives]     [Linux Media Devel]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [Linux Wireless Networking]     [Linux Omap]

  Powered by Linux