]> git.proxmox.com Git - mirror_ubuntu-focal-kernel.git/commit
USB: chipidea: fix use after free bug
authorLothar Waßmann <LW@KARO-electronics.de>
Thu, 22 Nov 2012 09:11:25 +0000 (10:11 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 26 Nov 2012 22:59:00 +0000 (14:59 -0800)
commit98c35534420d3147553bd3071a5fc63cd56de5b1
treecf24357c739a1b9d1bc6a2ca0108c6c9a9c1bee5
parent9db72fe6c943852032d9ed863c87e8c02d3cb9da
USB: chipidea: fix use after free bug

The pointer to a platform_device struct must not be dereferenced after
the device has been unregistered.

This bug produces a crash when unloading the ci13xxx kernel module
compiled with CONFIG_PAGE_POISONING enabled.

Signed-off-by: Lothar Waßmann <LW@KARO-electronics.de>
Cc: stable <stable@vger.kernel.org> # 3.6
Acked-by: Alexander Shishkin <alexander.shishkin@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/chipidea/core.c