This is a note to let you know that I've just added the patch titled
rpmsg: Fix possible refcount leak in rpmsg_register_device_override()
to the 4.19-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
rpmsg-fix-possible-refcount-leak-in-rpmsg_register_device_override.patch
and it can be found in the queue-4.19 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From stable-owner@xxxxxxxxxxxxxxx Tue Oct 31 12:40:22 2023
From: Lee Jones <lee@xxxxxxxxxx>
Date: Tue, 31 Oct 2023 11:39:52 +0000
Subject: rpmsg: Fix possible refcount leak in rpmsg_register_device_override()
To: lee@xxxxxxxxxx
Cc: stable@xxxxxxxxxxxxxxx, Hangyu Hua <hbh25y@xxxxxxxxx>, Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>, Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
Message-ID: <20231031113956.2287681-6-lee@xxxxxxxxxx>
From: Hangyu Hua <hbh25y@xxxxxxxxx>
commit d7bd416d35121c95fe47330e09a5c04adbc5f928 upstream.
rpmsg_register_device_override need to call put_device to free vch when
driver_set_override fails.
Fix this by adding a put_device() to the error path.
Fixes: bb17d110cbf2 ("rpmsg: Fix calling device_lock() on non-initialized device")
Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>
Signed-off-by: Hangyu Hua <hbh25y@xxxxxxxxx>
Link: https://lore.kernel.org/r/20220624024120.11576-1-hbh25y@xxxxxxxxx
Signed-off-by: Mathieu Poirier <mathieu.poirier@xxxxxxxxxx>
Signed-off-by: Lee Jones <lee@xxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
drivers/rpmsg/rpmsg_core.c | 1 +
1 file changed, 1 insertion(+)
--- a/drivers/rpmsg/rpmsg_core.c
+++ b/drivers/rpmsg/rpmsg_core.c
@@ -550,6 +550,7 @@ int rpmsg_register_device_override(struc
strlen(driver_override));
if (ret) {
dev_err(dev, "device_set_override failed: %d\n", ret);
+ put_device(dev);
return ret;
}
}
Patches currently in stable-queue which might be from stable-owner@xxxxxxxxxxxxxxx are
queue-4.19/rpmsg-glink-release-driver_override.patch
queue-4.19/rpmsg-fix-kfree-of-static-memory-on-setting-driver_override.patch
queue-4.19/rpmsg-fix-possible-refcount-leak-in-rpmsg_register_device_override.patch
