Re: [PATCH] power: supply: lp8727: fix use-after-free in lp8727_release_irq()

[Sebastian Reichel]

On Fri, 07 Aug 2026 03:35:20 +0000, Fan Wu wrote:
> lp8727_isr_func(), the threaded IRQ handler, is the only caller that arms
> pchg->work via schedule_delayed_work().  lp8727_release_irq() currently
> cancels the work before freeing the IRQ, so an IRQ delivered in between
> can re-arm the work through the threaded handler.  After .remove returns
> the devm layer frees pchg while lp8727_delayed_func() may still run and
> dereference it.
> 
> [...]

Applied, thanks!

[1/1] power: supply: lp8727: fix use-after-free in lp8727_release_irq()
      commit: ceb6ac43b0f591722401922ceb958ce2616935e0

Best regards,
-- 
Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxx>