Re: [BUG] drivers/usb: NULL pointer dereference in stub_recv_cmd_submit()

From: Greg Kroah-Hartman

Date: Sat Sep 12 2026 - 01:47:19 EST


On Sat, Sep 12, 2026 at 02:06:13AM +0000, co wrote:
> This is a bug report, not a patch submission. See
> https://bugs.sh/reporting.html
>
> We found a bug reachable in:
>
> path drivers/usb/usbip
> crash NULL pointer dereference in stub_recv_cmd_submit()
> commit 2f1baf1fc892 ("Merge tag 'trace-v7.2-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace")
>
> Config, environment, the sanitizer report and a C reproducer follow.
>
> == Notes ===============================================================
> If you fix this bug, this tag credits the report and lets us
> close it on our side:
>
> Reported-by: co+66c3f58096d0bde8@xxxxxxx
>
> Everything in this mail is validated by the reproducer below.
>
> We also hold an unreviewed LLM-generated analysis and candidate
> patch. The same reproducer panics the unpatched kernel and runs
> clean with that patch applied. Use it as a starting point, or ignore
> it and write your own:
>
> patch.diff https://bugs.sh/b/66c3f58096d0bde8/patch.diff

Please just submit patches like normal, in a format that can be applied,
and do not make us go to random links to attempt to get any information.
That's not how kernel development works at all.

thanks,

greg k-h