Re: [PATCH] power: supply: ucs1002: fix use-after-free on remove

From: Sebastian Reichel

Date: Mon Aug 03 2026 - 19:06:00 EST



On Sun, 02 Aug 2026 05:12:49 +0000, Fan Wu wrote:
> ucs1002 has no remove callback, so unbind runs entirely through devm.
> The alert IRQ handler queues the health_poll delayed work, and the work
> reschedules itself while the chip reports a bad-health condition. devm
> frees the alert IRQ, which only synchronizes the handler; it does not
> cancel the delayed work, which can then run after devm frees the driver
> data and dereference it.
>
> [...]

Applied, thanks!

[1/1] power: supply: ucs1002: fix use-after-free on remove
commit: 609af0ceeaefdfa42cd01dd060b20f2e41f9a232

Best regards,
--
Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxx>