Re: [PATCH v2] media: redrat3: fix UAF in probe error path leaving rc device registered

[Rik van Riel]

On Thu, 2026-08-13 at 15:02 +0100, Sean Young wrote:
> > https://lore.kernel.org/all/6a74a76d.ec7c9571.3ac9bb.0056.GAE@xxxxxxxxxx/
> > Fixes: 2154be651b90 ("[media] redrat3: new rc-core IR transceiver
> > device driver")
> > Cc: stable@xxxxxxxxxxxxxxx
> > Assisted-by: Hermes:muse-spark-1.2 syzkaller
> > Signed-off-by: Rik van Riel <riel@xxxxxxxxxxx>
> 
> The commit message is very good. Your patch is very similar to a
> patch
> I wrote earlier (which still has to be reviewed, I can't merge my
> own patches without review into the media-committer tree):
> 
> https://lkml.org/lkml/2026/7/29/1730 ;
> 
> I don't really have a preference for which one to merge. 

If it's any consolation, Sashiko suggests there
is another race condition left, pre-existing in
the code.

https://sashiko.dev/#/patchset/20260808232031.500f781c%40fangorn

I would be happy to review patches to fix that.

-- 
All Rights Reversed.