Re: [PATCH] power: supply: lp8727: fix use-after-free in lp8727_release_irq()
Sebastian Reichel <[email protected]>
| Newsgroups | org.kernel.vger.linux-pm,org.kernel.vger.linux-kernel,org.kernel.vger.stable |
|---|---|
| Message-ID | <178657343058.347615.7085557597766857502.b4-ty@b4> |
On Fri, 07 Aug 2026 03:35:20 +0000, Fan Wu wrote:
> lp8727_isr_func(), the threaded IRQ handler, is the only caller that arms
> pchg->work via schedule_delayed_work(). lp8727_release_irq() currently
> cancels the work before freeing the IRQ, so an IRQ delivered in between
> can re-arm the work through the threaded handler. After .remove returns
> the devm layer frees pchg while lp8727_delayed_func() may still run and
> dereference it.
>
> [...]
Applied, thanks!
[1/1] power: supply: lp8727: fix use-after-free in lp8727_release_irq()
commit: ceb6ac43b0f591722401922ceb958ce2616935e0
Best regards,
--
Sebastian Reichel <[email protected]>