[PATCH 00/11] USB: serial: io_edgeport: fixes and sync commands

From: Johan Hovold

Date: Wed Oct 21 2026 - 10:26:13 EST


This series fixes a NULL-deref triggered by syzbot, a memory corruption
and a UAF flagged by Sashiko, and another NULL-deref found through
inspection.

Also add the missing serialisation for MCR, drop the modem lines on
hangup and close, and switch to synchronous commands so that operations
are serialised as expected.

Johan


Johan Hovold (11):
USB: serial: io_edgeport: fix NULL-deref on early status
USB: serial: io_edgeport: fix potential fifo corruption
USB: serial: io_edgeport: fix potential close() use-after-free
USB: serial: io_edgeport: fix potential NULL-deref at open
USB: serial: io_edgeport: serialise MCR accesses
USB: serial: io_edgeport: drop redundant sanity checks
USB: serial: io_edgeport: drop redundant open sanity checks
USB: serial: io_edgeport: move initial termios update to open()
USB: serial: io_edgeport: deassert DTR/RTS on close() and B0
USB: serial: io_edgeport: replace atomic command allocations
USB: serial: io_edgeport: switch to synchronous commands

drivers/usb/serial/io_edgeport.c | 277 +++++++++++--------------------
1 file changed, 93 insertions(+), 184 deletions(-)

--
2.55.0