Re: [PATCH] staging: greybus: fix use-after-free in dump_module

From: Greg Kroah-Hartman

Date: Fri Oct 30 2026 - 11:24:35 EST


On Fri, Oct 30, 2026 at 11:03:55PM +0800, linfordWu wrote:
> gb_audio_manager_dump_module() drops modules_rwsem before dereferencing
> the module. A concurrent gb_audio_manager_remove() can free the module
> between the lookup and the dump.
>
> Keep the read lock held while dumping the module so removal cannot free
> it during the access.

How was this found and tested?

> Signed-off-by: linfordWu <linfordwu@xxxxxxx>

Real name please.

thanks,

greg k-h