]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
USB: serial: keyspan_pda: fix write-wakeup use-after-free
authorJohan Hovold <johan@kernel.org>
Sun, 25 Oct 2020 17:45:50 +0000 (18:45 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 30 Dec 2020 10:26:11 +0000 (11:26 +0100)
commit41bb69bb5f45d6f6bf0959216205972c1197a1b0
treed2bec60425304793a4377bf62bb061004567ad9a
parent9d5a037b430eb79043557be22e0f4a14acf32cc5
USB: serial: keyspan_pda: fix write-wakeup use-after-free

commit 37faf50615412947868c49aee62f68233307f4e4 upstream.

The driver's deferred write wakeup was never flushed on disconnect,
something which could lead to the driver port data being freed while the
wakeup work is still scheduled.

Fix this by using the usb-serial write wakeup which gets cancelled
properly on disconnect.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Acked-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/serial/keyspan_pda.c