Re: [PATCH 6.6.y] usb: gadget: f_ncm: Fix net_device lifecycle with device_move
From: Sasha Levin
Date: Mon Jun 08 2026 - 20:54:20 EST
> [PATCH 6.6.y] usb: gadget: f_ncm: Fix net_device lifecycle with device_move
I can't take this one (6.6 or 6.1) on its own. ec35c1969650 alone opens a
userspace-reachable NULL deref in eth_get_drvinfo() that is later closed
upstream by e002e92e88e1 ("usb: gadget: u_ether: Fix NULL pointer deref in
eth_get_drvinfo"), so applying this commit by itself trades a UAF for a DoS.
Please send a complete backport that also includes e002e92e88e124 (as the
follow-up patch in the same series) for both 6.6.y and 6.1.y, and I'll queue
them together.
--
Thanks,
Sasha