Re: [PATCH] gpio: aggregator: fix a potential use-after-free

[Bartosz Golaszewski]

On Wed, 20 May 2026 10:49:11 +0200, Bartosz Golaszewski wrote:
> On error we free aggr->lookups->dev_id before removing the entry from
> the lookup table. If a concurrent thread calls gpiod_find() before we
> remove the entry, it could iterate over the list and call
> gpiod_match_lookup_table() which unconditionally dereferences dev_id
> when calling strcmp(). Reverse the order of cleanup.
> 
> 
> [...]

Applied, thanks!

[1/1] gpio: aggregator: fix a potential use-after-free
      https://git.kernel.org/brgl/c/30c073cab97afb31901f94de9605177b6b84367e

Best regards,
-- 
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>