diff options
| author |   Kuen-Han Tsai <khtsai@google.com> | 2025-10-17 21:57:35 -0400 |
|---|---|---|
| committer |   Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-10-23 16:24:27 +0200 |
| commit | a8366263b7e5b663d7fb489d3a9ba1e2600049a6 (patch) | |
| tree | 082f015c8c48f713788b08a4a5e33904b5ebf121 /tools/perf/scripts/python/bin/ssh:/git@git.zx2c4.com/git: | |
| parent | usb: gadget: Introduce free_usb_request helper (diff) | |
usb: gadget: f_rndis: Refactor bind path to use __free()
[ Upstream commit 08228941436047bdcd35a612c1aec0912a29d8cd ]
After an bind/unbind cycle, the rndis->notify_req is left stale. If a
subsequent bind fails, the unified error label attempts to free this
stale request, leading to a NULL pointer dereference when accessing
ep->ops->free_request.
Refactor the error handling in the bind path to use the __free()
automatic cleanup mechanism.
Fixes: 45fe3b8e5342 ("usb ethernet gadget: split RNDIS function")
Cc: stable@kernel.org
Signed-off-by: Kuen-Han Tsai <khtsai@google.com>
Link: https://lore.kernel.org/r/20250916-ready-v1-6-4997bf277548@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Link: https://lore.kernel.org/r/20250916-ready-v1-6-4997bf277548@google.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'tools/perf/scripts/python/bin/ssh:/git@git.zx2c4.com/git:')
0 files changed, 0 insertions, 0 deletions