]> git.ipfire.org Git - thirdparty/linux.git/commit
ALSA: 6fire: Fix UAF at error handling during probe
authorTakashi Iwai <tiwai@suse.de>
Sun, 26 Jul 2026 07:48:19 +0000 (09:48 +0200)
committerTakashi Iwai <tiwai@suse.de>
Sun, 26 Jul 2026 08:02:01 +0000 (10:02 +0200)
commita54bf16965f896415c3337bc4fbb40fb11941d99
tree0b17a292c7cd4637fbd60d0a72a745ba96a891c3
parent0970274613fb463d376211450cab066d34ebfe6a
ALSA: 6fire: Fix UAF at error handling during probe

Although 6fire driver had a few fixes for dealing with the early error
handling during the probe phase, it forgot a pending URB before
freeing the resources, which may lead to a UAF.

This patch addresses it by doing the almost same cleanup procedure
like the normal disconnect phase at the error path.

Reported-and-tested-by: Shuangpeng Bai <shuangpeng.kernel@gmail.com>
Closes: https://lore.kernel.org/20260724030900.1984491-1-shuangpeng.kernel@gmail.com
Cc: <stable@vger.kernel.org>
Link: https://patch.msgid.link/20260726074821.2288158-1-tiwai@suse.de
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/usb/6fire/chip.c