Re: [GIT PULL] Driver core fixes for 7.0-rc5

From: Danilo Krummrich

Date: Sun Mar 22 2026 - 08:36:52 EST


On Sun Mar 22, 2026 at 1:08 AM CET, Linus Torvalds wrote:
> I'm not convinced there are advantages to going through individual
> trees - these are just buses working around driver core interface
> issues, not some "bus X does bus X things".

I figured it could be a bit safer to let subsystems pick things up themselves at
their own pace, as two of those stand out a bit.

SPI and AP explicitly print "\n" when driver_override is not set, whereas all
other buses always pass the pointer directly to sysfs_emit(), which results in
"(null)\n" instead.

AP also has a custom driver_override counter, which is updated in the sysfs
store() callback.

> That said, I'm also not convinced this is all really -rc material in
> the first place. This issue is neither new nor does the UAF seem to be
> triggerable in any actual realistic scenario, and requires root
> privileges to trigger even in the unrealistic case.

I don't disagree; the reason I sent this regardless is that we already had a
(simpler) fix in place that we reverted in -rc3, so I figured it is not
unreasonable to follow this up right away.

I think none of the above are strong reasons though (i.e. the fact we already
had a fix in place does not make the underlying issue any more urgent).

That said, deferring until the merge window seems fair.

- Danilo