Re: [PATCH] firmware: arm_scmi: Fix requested device removal race
Sudeep Holla <[email protected]> Fri, 24 Jul 2026 10:32:31 +0100
| Newsgroups | org.kernel.vger.arm-scmi,org.infradead.lists.linux-arm-kernel |
|---|---|
| Message-ID | <178488551620.2847386.190019543861220832.b4-ty@b4> |
On Wed, 22 Jul 2026 10:52:50 +0100, Sudeep Holla wrote:
> scmi_protocol_device_unrequest() drops scmi_requested_devices_mtx while
> notifying listeners but continues to retain the per-protocol list head.
> When two SCMI drivers for the same protocol unregister concurrently, one
> thread can remove the final request and free the list head while the other
> is running its notifier. The latter then dereferences the freed list head
> after reacquiring the mutex and can free it a second time.
>
> [...]
Applied to sudeep.holla/linux (for-next/scmi/updates), thanks!
[1/1] firmware: arm_scmi: Fix requested device removal race
https://git.kernel.org/sudeep.holla/c/2c4097e6c4ae
--
Regards,
Sudeep