On Wed, Dec 11, 2019 at 08:31:49PM +0800, Mao Wenan wrote:
> From: Oliver Neukum <oneukum@xxxxxxxx>
>
> mainline inclusion
> from mainline-5.3
> commit c468a8aa790e0dfe0a7f8a39db282d39c2c00b46
> category: bugfix
> bugzilla: NA
> DTS: NA
> CVE: CVE-2019-19528
>
> -------------------------------------------------
>
> We have to drop the mutex before we close() upon disconnect()
> as close() needs the lock. This is safe to do by dropping the
> mutex as intfdata is already set to NULL, so open() will fail.
>
> Fixes: 03f36e885fc26 ("USB: open disconnect race in iowarrior")
> Reported-by: syzbot+a64a382964bf6c71a9c0@xxxxxxxxxxxxxxxxxxxxxxxxx
> Cc: stable <stable@xxxxxxxxxxxxxxx>
> Signed-off-by: Oliver Neukum <oneukum@xxxxxxxx>
> Link: https://lore.kernel.org/r/20190808092728.23417-1-oneukum@xxxxxxxx
> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
> Signed-off-by: Mao Wenan <maowenan@xxxxxxxxxx>
> ---
> drivers/usb/misc/iowarrior.c | 7 ++++---
> 1 file changed, 4 insertions(+), 3 deletions(-)
Why are you cc:ing us all on these patches???
