[PATCH v3 0/3] Fix and rework of rpmsg_eptdev_add()

From: Dawei Li

Date: Thu Nov 13 2025 - 10:39:38 EST


Hi,

This series fixes bug introduced by anonymous inode eptdev code and
rework the exception handing paths.

And it tries to address a long suffering issue which may be backported
to stable kernels.

Change for v3:
- Split it into 3 patches:
1/3: Fix legacy bug.
2/3: Fix new bug introduced by anonymous eptdev code.
3/3: Rework error handling code.
Link to v2:
https://lore.kernel.org/all/20251112150108.49017-1-dawei.li@xxxxxxxxx/

Change for v2:
- Add put_device() when __rpmsg_eptdev_open() failed.
Link to v1:
https://lore.kernel.org/all/20251112142813.33708-1-dawei.li@xxxxxxxxx/

Dawei Li (3):
rpmsg: char: Remove put_device() in rpmsg_eptdev_add()
rpmsg: char: Fix UAF and memory leak in
rpmsg_anonymous_eptdev_create()
rpmsg: char: Rework exception handling of rpmsg_eptdev_add()

drivers/rpmsg/rpmsg_char.c | 61 +++++++++++++++++++++-----------------
1 file changed, 34 insertions(+), 27 deletions(-)

--
2.25.1