Re: (subset) [PATCH v2 0/2] gpio: sloppy-logic-analyzer: fix debugfs UAF on unbind

From: Bartosz Golaszewski

Date: Mon Aug 10 2026 - 06:55:01 EST



On Fri, 31 Jul 2026 01:02:56 +0300, Cengiz Can wrote:
> Patch 1 fixes a use-after-free. The "trigger" debugfs file uses
> debugfs_create_file_unsafe() with a hand-rolled ->write that dereferences
> the devres-freed gpio_la_poll_priv without holding a debugfs reference, so
> an unbind racing a write frees the object under the handler. Switching to
> debugfs_create_file() makes debugfs_remove_recursive() drain the handler
> first.
>
> [...]

Applied, thanks!

[1/2] gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind
https://git.kernel.org/brgl/c/44f3468a0aef1aabdad551898ab7cfa2a9d20e99

Best regards,
--
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>