mbox series

[0/2] can: fix use-after-free on USB disconnect

Message ID 20191001102914.4567-1-johan@kernel.org
Headers show
Series can: fix use-after-free on USB disconnect | expand

Message

Johan Hovold Oct. 1, 2019, 10:29 a.m. UTC 
Syzbot reported a use-after-free on disconnect in mcba_usb and a quick
grep revealed a similar issue in usb_8dev.

Compile-tested only.

Johan


Johan Hovold (2):
  can: mcba_usb: fix use-after-free on disconnect
  can: usb_8dev: fix use-after-free on disconnect

 drivers/net/can/usb/mcba_usb.c | 3 +--
 drivers/net/can/usb/usb_8dev.c | 3 +--
 2 files changed, 2 insertions(+), 4 deletions(-)

Comments

Marc Kleine-Budde Oct. 4, 2019, 8:45 p.m. UTC | #1 
On 10/1/19 12:29 PM, Johan Hovold wrote:
> Syzbot reported a use-after-free on disconnect in mcba_usb and a quick
> grep revealed a similar issue in usb_8dev.
> 
> Compile-tested only.

Applied to can.

tnx,
Marc