]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
usb: core: hcd: fix possible deadlock in rh control transfers
authorOliver Neukum <oneukum@suse.com>
Wed, 29 Apr 2026 09:44:04 +0000 (11:44 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 22 May 2026 09:34:24 +0000 (11:34 +0200)
commitd5559f43d76b398392b26a15cbc16d731969cd1c
treeb7607fd9433bc73d65ee0b033a552fdbf57f1aaa
parentdd0c03d685225cb8fc60c477417d1b9c3b05ba9d
usb: core: hcd: fix possible deadlock in rh control transfers

>From within the SCSI error handler memory allocations must not
trigger IO. Handling errors in UAS and the storage driver may
involve resetting a device. The thread doing the reset itself
relies on VM magic. However, that is insufficient, as resetting
a device involves resuming it. Resumption as well as resetting
involves conrol transfers to the parent of the device to be reset.
That may be a root hub. Hence usbcore must heed the flags passed
to usb_submit_urb() processing control transfers to root hubs.

The problem exist since the storage driver has been merged.

Signed-off-by: Oliver Neukum <oneukum@suse.com>
Link: https://patch.msgid.link/20260429094413.181038-1-oneukum@suse.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/core/hcd.c