[PATCH] drm/mipi-dsi: fix UAF on device_add() failure

[Linkai Gong]

mipi_dsi_device_alloc() calls device_initialize(). On
mipi_dsi_device_add() failure the error path used kfree() instead of
put_device(), skipping mipi_dsi_dev_release().

Fixes: 068a00233969 ("drm: Add MIPI DSI bus support")
Signed-off-by: Linkai Gong <gonglinkai@xxxxxxxxxx>
---
 drivers/gpu/drm/drm_mipi_dsi.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/gpu/drm/drm_mipi_dsi.c b/drivers/gpu/drm/drm_mipi_dsi.c
index 3ac1dd5ad640..1b4c0acbd30d 100644
--- a/drivers/gpu/drm/drm_mipi_dsi.c
+++ b/drivers/gpu/drm/drm_mipi_dsi.c
@@ -233,7 +233,7 @@ mipi_dsi_device_register_full(struct mipi_dsi_host *host,
 	ret = mipi_dsi_device_add(dsi);
 	if (ret) {
 		dev_err(host->dev, "failed to add DSI device %d\n", ret);
-		kfree(dsi);
+		put_device(&dsi->dev);
 		return ERR_PTR(ret);
 	}
 
-- 
2.25.1