This is a note to let you know that I've just added the patch titled Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails" to the 5.10-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: revert-rapidio-fix-a-null-pointer-dereference-when-create_workqueue-fails.patch and it can be found in the queue-5.10 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From 5e68b86c7b7c059c0f0ec4bf8adabe63f84a61eb Mon Sep 17 00:00:00 2001 From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Date: Mon, 3 May 2021 13:57:11 +0200 Subject: Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails" From: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> commit 5e68b86c7b7c059c0f0ec4bf8adabe63f84a61eb upstream. This reverts commit 23015b22e47c5409620b1726a677d69e5cd032ba. Because of recent interactions with developers from @umn.edu, all commits from them have been recently re-reviewed to ensure if they were correct or not. Upon review, this commit was found to be incorrect for the reasons below, so it must be reverted. It will be fixed up "correctly" in a later kernel change. The original commit has a memory leak on the error path here, it does not clean up everything properly. Cc: Kangjie Lu <kjlu@xxxxxxx> Cc: Alexandre Bounine <alex.bou9@xxxxxxxxx> Cc: Matt Porter <mporter@xxxxxxxxxxxxxxxxxxx> Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> Fixes: 23015b22e47c ("rapidio: fix a NULL pointer dereference when create_workqueue() fails") Cc: stable <stable@xxxxxxxxxxxxxxx> Link: https://lore.kernel.org/r/20210503115736.2104747-45-gregkh@xxxxxxxxxxxxxxxxxxx Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- drivers/rapidio/rio_cm.c | 8 -------- 1 file changed, 8 deletions(-) --- a/drivers/rapidio/rio_cm.c +++ b/drivers/rapidio/rio_cm.c @@ -2138,14 +2138,6 @@ static int riocm_add_mport(struct device mutex_init(&cm->rx_lock); riocm_rx_fill(cm, RIOCM_RX_RING_SIZE); cm->rx_wq = create_workqueue(DRV_NAME "/rxq"); - if (!cm->rx_wq) { - riocm_error("failed to allocate IBMBOX_%d on %s", - cmbox, mport->name); - rio_release_outb_mbox(mport, cmbox); - kfree(cm); - return -ENOMEM; - } - INIT_WORK(&cm->rx_work, rio_ibmsg_handler); cm->tx_slot = 0; Patches currently in stable-queue which might be from gregkh@xxxxxxxxxxxxxxxxxxx are queue-5.10/x86-sev-es-move-sev_es_put_ghcb-in-prep-for-follow-on-patch.patch queue-5.10/alsa-hda-realtek-fix-silent-headphone-output-on-asus-ux430ua.patch queue-5.10/x86-sev-es-invalidate-the-ghcb-after-completing-vmgexit.patch queue-5.10/alsa-hda-realtek-add-fixup-for-hp-omen-laptop.patch queue-5.10/alsa-intel8x0-don-t-update-period-unless-prepared.patch queue-5.10/cifs-fix-memory-leak-in-smb2_copychunk_range.patch queue-5.10/alsa-hda-realtek-reset-eapd-coeff-to-default-value-for-alc287.patch queue-5.10/misc-eeprom-at24-check-suspend-status-before-disable-regulator.patch queue-5.10/alsa-firewire-lib-fix-amdtp_packet-tracepoints-event-for-packet_index-field.patch queue-5.10/x86-sev-es-don-t-return-null-from-sev_es_get_ghcb.patch queue-5.10/revert-serial-mvebu-uart-fix-to-avoid-a-potential-null-pointer-dereference.patch queue-5.10/revert-rapidio-fix-a-null-pointer-dereference-when-create_workqueue-fails.patch queue-5.10/alsa-bebob-oxfw-fix-kconfig-entry-for-mackie-d.2-pro.patch queue-5.10/alsa-line6-fix-racy-initialization-of-line6-midi.patch queue-5.10/x86-sev-es-use-__put_user-__get_user-for-data-accesses.patch queue-5.10/alsa-firewire-lib-fix-calculation-for-size-of-ir-context-payload.patch queue-5.10/alsa-hda-realtek-add-fixup-for-hp-spectre-x360-15-df0xxx.patch queue-5.10/alsa-dice-fix-stream-format-for-tc-electronic-konnekt-live-at-high-sampling-transfer-frequency.patch queue-5.10/alsa-dice-fix-stream-format-at-middle-sampling-rate-for-alesis-io-26.patch queue-5.10/uio_hv_generic-fix-a-memory-leak-in-error-handling-paths.patch queue-5.10/nvme-tcp-fix-possible-use-after-completion.patch queue-5.10/alsa-firewire-lib-fix-check-for-the-size-of-isochronous-packet-payload.patch queue-5.10/alsa-usb-audio-validate-ms-endpoint-descriptors.patch queue-5.10/btrfs-avoid-rcu-stalls-while-running-delayed-iputs.patch queue-5.10/revert-alsa-sb8-add-a-check-for-request_region.patch queue-5.10/x86-sev-es-forward-page-faults-which-happen-during-emulation.patch queue-5.10/alsa-hda-fixup-headset-for-asus-gu502-laptop.patch queue-5.10/alsa-hda-realtek-add-some-clove-ssids-of-alc293.patch queue-5.10/rapidio-handle-create_workqueue-failure.patch