Messages in this thread | | | Date | Mon, 9 Oct 2017 13:10:34 +0200 | From | Johan Hovold <> | Subject | Re: [PATCH 1/2] USB: serial: console: fix use-after-free on disconnect |
| |
On Mon, Oct 09, 2017 at 01:05:30PM +0200, Andrey Konovalov wrote: > On Wed, Oct 4, 2017 at 11:01 AM, Johan Hovold <johan@kernel.org> wrote: > > A clean-up patch removing removing two redundant NULL-checks from the > > console disconnect handler inadvertently also removed a third check. > > This could lead to the struct usb_serial being prematurely freed by the > > console code when a driver accepts but does not register any ports for > > an interface which also lacks endpoint descriptors. > > > > Fixes: 0e517c93dc02 ("USB: serial: console: clean up sanity checks") > > Cc: stable <stable@vger.kernel.org> # 4.11 > > Reported-by: Andrey Konovalov <andreyknvl@google.com> > > Tested-by: Andrey Konovalov <andreyknvl@google.com> > > This fixes the crash.
I just forwarded this one in a pull-request to Greg, but thanks for testing nonetheless.
Johan
| |