Re: [PATCH v7] usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()

From: Xu Yang

Date: Tue Aug 04 2026 - 05:15:34 EST


On Tue, Aug 04, 2026 at 09:13:38AM +0530, Jeffin Philip wrote:
> In uvcg_video_init(), if kthread_run_worker() fails,
> the error logged uses uvcg_err(), however, the pointer it uses:
> video->uvc is not assigned at this point, triggering a null
> pointer dereference. Fix this by directly using uvc->func which
> is assigned already.
>
> Reported-by: syzbot+8dcac923582c28505fd7@xxxxxxxxxxxxxxxxxxxxxxxxx
> Closes: https://syzkaller.appspot.com/bug?extid=8dcac923582c28505fd7
> Fixes: f0bbfbd16b3b ("usb: gadget: uvc: rework to enqueue in pump worker from encoded queue")
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Jeffin Philip <jeffinphilip14@xxxxxxxxx>

Reviewed-by: Xu Yang <xu.yang_2@xxxxxxx>