diff options
author | 2025-03-10 22:24:16 -0700 | |
---|---|---|
committer | 2025-04-15 17:04:35 +0200 | |
commit | 18daa52418e7e4629ed1703b64777294209d2622 (patch) | |
tree | 8039b3bc6b139d7e1aa53387cf89c3f1842050d0 /scripts/lib/kdoc/kdoc_parser.py | |
parent | driver core: introduce device_set_driver() helper (diff) | |
download | wireguard-linux-18daa52418e7e4629ed1703b64777294209d2622.tar.xz wireguard-linux-18daa52418e7e4629ed1703b64777294209d2622.zip |
driver core: fix potential NULL pointer dereference in dev_uevent()
If userspace reads "uevent" device attribute at the same time as another
threads unbinds the device from its driver, change to dev->driver from a
valid pointer to NULL may result in crash. Fix this by using READ_ONCE()
when fetching the pointer, and take bus' drivers klist lock to make sure
driver instance will not disappear while we access it.
Use WRITE_ONCE() when setting the driver pointer to ensure there is no
tearing.
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Reviewed-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Link: https://lore.kernel.org/r/20250311052417.1846985-3-dmitry.torokhov@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'scripts/lib/kdoc/kdoc_parser.py')
0 files changed, 0 insertions, 0 deletions