Re: [PATCH net v2] dpll: fix NULL deref in dpll_device_ops() during teardown race
From: patchwork-bot+netdevbpf
Date: Mon Aug 17 2026 - 16:42:45 EST
Hello:
This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Thu, 13 Aug 2026 16:08:17 +0200 you wrote:
> When the last owner of a dpll device unregisters while a foreign driver
> still holds a pin on it via dpll_pin_on_pin_register(), the dpll object
> stays alive with an empty registration list. A pin notification queued
> before the unregister (e.g. ice reacting to zl3073x_i2c removal) then
> walks pin->dpll_refs into dpll_device_ops(), which trips the WARN_ON and
> dereferences the missing registration. dpll_lock cannot help because the
> notification work was queued before the unregistering driver took the
> lock.
>
> [...]
Here is the summary with links:
- [net,v2] dpll: fix NULL deref in dpll_device_ops() during teardown race
https://git.kernel.org/netdev/net/c/33f016b23a21
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html