Messages in this thread | | | Subject | Re: KASAN: use-after-free Read in usb_free_coherent | From | Oliver Neukum <> | Date | Mon, 05 Aug 2019 11:44:47 +0200 |
| |
Am Donnerstag, den 01.08.2019, 11:52 +0100 schrieb Suzuki K Poulose: > > Looks like the yurex_delete() drops the ref count on the dev->udev > way early in the function and then later tries to see if there > are any other buffers associated with it worth releasing. So, > I am guessing moving the usb_put_dev(), after we have finished > all that might solve the issue ?
Hi,
the fix looks good to me.
Regards Oliver
| |