Re: [PATCH v2] HID: mcp-2221: prevent UAF in delayed work
From: Jiri Kosina
Date: Mon Feb 20 2023 - 04:10:07 EST
On Thu, 16 Feb 2023, Benjamin Tissoires wrote:
> If the device is plugged/unplugged without giving time for mcp_init_work()
> to complete, we might kick in the devm free code path and thus have
> unavailable struct mcp_2221 while in delayed work.
>
> Canceling the delayed_work item is enough to solve the issue, because
> cancel_delayed_work_sync will prevent the work item to requeue itself.
>
> Signed-off-by: Benjamin Tissoires <benjamin.tissoires@xxxxxxxxxx>
Acked-by: Jiri Kosina <jkosina@xxxxxxx>
Thanks Benjamin.
--
Jiri Kosina
SUSE Labs