Re: [PATCH] power: supply: ucs1002: fix use-after-free on remove
Sebastian Reichel <[email protected]> Tue, 04 Aug 2026 01:01:54 +0200
| Newsgroups | org.kernel.vger.linux-pm,org.kernel.vger.linux-kernel,org.kernel.vger.stable |
|---|---|
| Message-ID | <178579811475.234019.11116107083120527143.b4-ty@b4> |
On Sun, 02 Aug 2026 05:12:49 +0000, Fan Wu wrote:
> ucs1002 has no remove callback, so unbind runs entirely through devm.
> The alert IRQ handler queues the health_poll delayed work, and the work
> reschedules itself while the chip reports a bad-health condition. devm
> frees the alert IRQ, which only synchronizes the handler; it does not
> cancel the delayed work, which can then run after devm frees the driver
> data and dereference it.
>
> [...]
Applied, thanks!
[1/1] power: supply: ucs1002: fix use-after-free on remove
commit: 609af0ceeaefdfa42cd01dd060b20f2e41f9a232
Best regards,
--
Sebastian Reichel <[email protected]>