RE: [PATCH] phy: renesas: rcar-gen3-usb2: Fix use-after-free in rcar_gen3_phy_usb2_remove due to race condition

Biju Das <[email protected]> Tue, 4 Aug 2026 09:08:44 +0000
Newsgroups org.kernel.vger.linux-renesas-soc,org.infradead.lists.linux-phy,org.kernel.vger.linux-kernel
Message-ID <TY3PR01MB1134613500284ECC47AE1B1D686D42@TY3PR01MB11346.jpnprd01.prod.outlook.com>
DQoNCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogUGVpIFhpYW8gPHhpYW9w
ZWkwMUBreWxpbm9zLmNuPg0KPiBTZW50OiAwNCBBdWd1c3QgMjAyNiAxMDowNQ0KPiBUbzogQmlq
dSBEYXMgPGJpanUuZGFzLmp6QGJwLnJlbmVzYXMuY29tPjsgWW9zaGloaXJvIFNoaW1vZGEgPHlv
c2hpaGlyby5zaGltb2RhLnVoQHJlbmVzYXMuY29tPjsNCj4gdmtvdWxAa2VybmVsLm9yZzsgbmVp
bC5hcm1zdHJvbmdAbGluYXJvLm9yZzsgZ2VlcnQrcmVuZXNhc0BnbGlkZXIuYmU7IG1hZ251cy5k
YW1tDQo+IDxtYWdudXMuZGFtbUBnbWFpbC5jb20+OyBsaW51eC1yZW5lc2FzLXNvY0B2Z2VyLmtl
cm5lbC5vcmc7IGxpbnV4LXBoeUBsaXN0cy5pbmZyYWRlYWQub3JnOyBsaW51eC0NCj4ga2VybmVs
QHZnZXIua2VybmVsLm9yZw0KPiBTdWJqZWN0OiBSZTogW1BBVENIXSBwaHk6IHJlbmVzYXM6IHJj
YXItZ2VuMy11c2IyOiBGaXggdXNlLWFmdGVyLWZyZWUgaW4gcmNhcl9nZW4zX3BoeV91c2IyX3Jl
bW92ZSBkdWUgdG8NCj4gcmFjZSBjb25kaXRpb24NCj4gDQo+IA0KPiANCj4g5ZyoIDIwMjYvOC80
IDE2OjM0LCBCaWp1IERhcyDlhpnpgZM6DQo+ID4gSGkgUGVpIFhpYW8sDQo+ID4NCj4gPiBUaGFu
a3MgZm9yIHRoZSBwYXRjaC4NCj4gPg0KPiA+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0K
PiA+PiBGcm9tOiBQZWkgWGlhbyA8eGlhb3BlaTAxQGt5bGlub3MuY24+DQo+ID4+IFNlbnQ6IDA0
IEF1Z3VzdCAyMDI2IDA5OjAyDQo+ID4+IFN1YmplY3Q6IFtQQVRDSF0gcGh5OiByZW5lc2FzOiBy
Y2FyLWdlbjMtdXNiMjogRml4IHVzZS1hZnRlci1mcmVlIGluDQo+ID4+IHJjYXJfZ2VuM19waHlf
dXNiMl9yZW1vdmUgZHVlIHRvIHJhY2UgY29uZGl0aW9uDQo+ID4+DQo+ID4+IEluIHJjYXJfZ2Vu
M19waHlfdXNiMl9wcm9iZSwgJmNoYW5uZWwtPndvcmsgaXMgYm91bmQgd2l0aA0KPiA+PiByY2Fy
X2dlbjNfcGh5X3VzYjJfd29yay4gcmNhcl9nZW4zX3BoeV91c2IyX2lycSBjYW4gc2NoZWR1bGUg
dGhpcw0KPiA+PiB3b3JrIG9uIHN5c3RlbV93cSB2aWEgcmNhcl9nZW4zX2RldmljZV9yZWNvZ25p
dGlvbigpLCBhbmQgdGhlIHJvbGUgc3lzZnMgc3RvcmUgY2FuIGFsc28gc2NoZWR1bGUgaXQNCj4g
dmlhIHJjYXJfZ2VuM19pbml0X2Zvcl9ob3N0KCkgLyByY2FyX2dlbjNfaW5pdF9mb3JfcGVyaSgp
Lg0KPiA+Pg0KPiA+PiBJZiB3ZSByZW1vdmUgdGhlIGRldmljZSwgcmNhcl9nZW4zX3BoeV91c2Iy
X3JlbW92ZSBtYWtlcyBjbGVhbnVwIGFuZA0KPiA+PiB0aGUgbWVtb3J5IGFsbG9jYXRlZCBmb3Ig
Y2hhbm5lbCB3aXRoIGRldm1fa3phbGxvYygpIGlzIHJlbGVhc2VkIGJ5DQo+ID4+IHRoZSBkZXZt
IGNsZWFudXAgYWZ0ZXIgdGhlIHJlbW92ZSBjYWxsYmFjayByZXR1cm5zLCB3aGlsZSB0aGUgd29y
aw0KPiA+PiBtZW50aW9uZWQgYWJvdmUgbWF5IHN0aWxsIGJlIHBlbmRpbmcgb3IgcnVubmluZy4g
VGhlIHNlcXVlbmNlIG9mIG9wZXJhdGlvbnMgdGhhdCBtYXkgbGVhZCB0byBhIFVBRiBidWcNCj4g
aXMgYXMgZm9sbG93czoNCj4gPj4NCj4gPj4gQ1BVMCAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgQ1BVMQ0KPiA+Pg0KPiA+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICB8IHJjYXJfZ2VuM19waHlfdXNiMl9pcnENCj4gPj4gICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCByY2FyX2dlbjNfZGV2aWNlX3JlY29nbml0
aW9uDQo+ID4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgcmNh
cl9nZW4zX2luaXRfZm9yX2hvc3QNCj4gPj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgfCBzY2hlZHVsZV93b3JrKCZjaC0+d29yaykNCj4gPj4gcmNhcl9nZW4zX3Bo
eV91c2IyX3JlbW92ZSAgICAgICAgICAgICAgICAgfA0KPiA+PiBkZXZpY2VfcmVtb3ZlX2ZpbGUo
JnBkZXYtPmRldiwgICAgICAgICAgICB8DQo+ID4+ICAgICAgICAgICAgICAgICAgICAmZGV2X2F0
dHJfcm9sZSkgICAgICAgIHwNCj4gPj4gLy8gcmVtb3ZlIHJldHVybnMgICAgICAgICAgICAgICAg
ICAgICAgICAgfA0KPiA+PiAvLyBkZXZtIGNsZWFudXA6IGZyZWVfaXJxLCAgICAgICAgICAgICAg
ICB8DQo+ID4+IC8vIGtmcmVlKGNoYW5uZWwpICAgICAgICAgICAgICAgICAgICAgICAgIHwNCj4g
Pj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCByY2FyX2dlbjNf
cGh5X3VzYjJfd29yaw0KPiA+PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICB8IC8vIHVzZSBjaA0KPiA+PiAodXNlLWFmdGVyLWZyZWUpDQo+ID4+DQo+ID4+IEZpeCBp
dCBieSBkaXNhYmxpbmcgdGhlIE9URyBpbnRlcnJ1cHRzLCBzbyB0aGUgSVJRIGhhbmRsZXIgY2Fu
bm90DQo+ID4+IHNjaGVkdWxlIG5ldyB3b3JrLCBhbmQgY2FuY2VsaW5nIHRoZSB3b3JrIGJlZm9y
ZSB0aGUgcmVtYWluaW5nIGNsZWFudXAgaW4gcmNhcl9nZW4zX3BoeV91c2IyX3JlbW92ZQ0KPiBh
bmQgdGhlIGRldm0gcmVsZWFzZSBvZiBjaGFubmVsLg0KPiA+Pg0KPiA+PiBGaXhlczogYzE0Zjhh
NDAzMmVmICgicGh5OiByY2FyLWdlbjMtdXNiMjogZml4IG11dGV4X2xvY2sgY2FsbGluZyBpbg0K
PiA+PiBpbnRlcnJ1cHQiKQ0KPiA+PiBBc3Npc3RlZC1ieTogQ29kZXg6ZGVlcHNlZWstdjQtZmxh
c2gNCj4gPj4gU2lnbmVkLW9mZi1ieTogUGVpIFhpYW8gPHhpYW9wZWkwMUBreWxpbm9zLmNuPg0K
PiA+PiAtLS0NCj4gPj4gIGRyaXZlcnMvcGh5L3JlbmVzYXMvcGh5LXJjYXItZ2VuMy11c2IyLmMg
fCAxMCArKysrKysrKystDQo+ID4+ICAxIGZpbGUgY2hhbmdlZCwgOSBpbnNlcnRpb25zKCspLCAx
IGRlbGV0aW9uKC0pDQo+ID4+DQo+ID4+IGRpZmYgLS1naXQgYS9kcml2ZXJzL3BoeS9yZW5lc2Fz
L3BoeS1yY2FyLWdlbjMtdXNiMi5jDQo+ID4+IGIvZHJpdmVycy9waHkvcmVuZXNhcy9waHktcmNh
ci1nZW4zLXVzYjIuYw0KPiA+PiBpbmRleCA5YTQ1ZDg0MGVmZWIuLmZhMGU2ODBhNGI5MSAxMDA2
NDQNCj4gPj4gLS0tIGEvZHJpdmVycy9waHkvcmVuZXNhcy9waHktcmNhci1nZW4zLXVzYjIuYw0K
PiA+PiArKysgYi9kcml2ZXJzL3BoeS9yZW5lc2FzL3BoeS1yY2FyLWdlbjMtdXNiMi5jDQo+ID4+
IEBAIC0xMDY3LDggKzEwNjcsMTYgQEAgc3RhdGljIHZvaWQgcmNhcl9nZW4zX3BoeV91c2IyX3Jl
bW92ZShzdHJ1Y3QgcGxhdGZvcm1fZGV2aWNlICpwZGV2KSAgew0KPiA+PiAgCXN0cnVjdCByY2Fy
X2dlbjNfY2hhbiAqY2hhbm5lbCA9IHBsYXRmb3JtX2dldF9kcnZkYXRhKHBkZXYpOw0KPiA+Pg0K
PiA+PiAtCWlmIChjaGFubmVsLT5pc19vdGdfY2hhbm5lbCkNCj4gPj4gKwlpZiAoY2hhbm5lbC0+
aXNfb3RnX2NoYW5uZWwpIHsNCj4gPj4gKwkJLyogRGlzYWJsZSBPVEcgaW50ZXJydXB0cyBzbyB0
aGUgSVJRIGhhbmRsZXIgY2Fubm90DQo+ID4+ICsJCSAqIHNjaGVkdWxlIG5ldyB3b3JrLg0KPiA+
PiArCQkgKi8NCj4gPj4gKwkJcmNhcl9nZW4zX2NvbnRyb2xfb3RnX2lycShjaGFubmVsLCAwKTsN
Cj4gPj4gKw0KPiA+PiAgCQlkZXZpY2VfcmVtb3ZlX2ZpbGUoJnBkZXYtPmRldiwgJmRldl9hdHRy
X3JvbGUpOw0KPiA+PiArDQo+ID4+ICsJCWNhbmNlbF93b3JrX3N5bmMoJmNoYW5uZWwtPndvcmsp
Ow0KPiA+DQo+ID4gV2hhdCBhYm91dCBwZW5kaW5nIHdxIHRoYXQgaXMgc3RpbGwgYWJvdXQgZXhl
Y3V0ZSBhZnRlcg0KPiA+ICJkZXZpY2VfcmVtb3ZlX2ZpbGUoJnBkZXYtPmRldiwgJmRldl9hdHRy
X3JvbGUpOyIgPw0KPiBIaSBCaWp1LA0KPiAgIEkgZG9uJ3QgdW5kZXJzdGFuZCB3aGF0IHlvdSBt
ZWFuLiBjYW5jZWxfd29ya19zeW5jIGlzIGV4YWN0bHkgd2hhdCBjYXRjaGVzIHRoaXMga2luZCBv
ZiBwZW5kaW5nIHdvcmsg4oCUDQo+IGl0IGVpdGhlciBjYW5jZWxzIHRoZSB3b3JrIHRoYXQgaGFz
bid0IHJ1biB5ZXQsIG9yIHdhaXRzIGZvciB0aGUgb25lIHRoYXQgaXMgY3VycmVudGx5IHJ1bm5p
bmcgdG8gZmluaXNoLA0KPiBhbmQgaXQgaXMgcGxhY2VkIHJpZ2h0Lg0KPiAgQ291bGQgeW91IGV4
cGxhaW4gaXQgaW4gbW9yZSBkZXRhaWw/DQoNCkFzc3VtZSB5b3UgcmVtb3ZlZCB0aGUgZmlsZSwg
YW5kIGJlZm9yZSBjYW5jZWxfd29ya19zeW5jKCksIHRoZSBXUSBnZXQgc2NoZWR1bGVkDQp3aWxs
IGl0IHJlc3VsdCBpbiBVQUYgYnVnIG1lbnRpb25lZCBpbiB0aGUgY29tbWl0IG1lc3NhZ2UuDQoN
Ck1heWJlPz8NCg0KcmNhcl9nZW4zX2NvbnRyb2xfb3RnX2lycShjaGFubmVsLCAwKTsNCmNhbmNl
bF93b3JrX3N5bmMoJmNoYW5uZWwtPndvcmspOw0KZGV2aWNlX3JlbW92ZV9maWxlKCZwZGV2LT5k
ZXYsICZkZXZfYXR0cl9yb2xlKTsNCg0KQ2hlZXJzLA0KQmlqdQ0KDQoNCg0KDQo+IA0KPiBUaGFu
a3PvvIENCj4gUGVpLg0KPiANCj4gICA+IGFmdGVyIGRldmljZV9yZW1vdmVfZmlsZS4NCj4gDQo+
ID4gQ2hlZXJzLA0KPiA+IEJpanUNCj4gPg0KPiA+PiArCX0NCj4gPj4gIH0NCj4gPj4NCj4gPj4g
IHN0YXRpYyBpbnQgcmNhcl9nZW4zX3BoeV91c2IyX3N1c3BlbmQoc3RydWN0IGRldmljZSAqZGV2
KQ0KPiA+PiAtLQ0KPiA+PiAyLjI1LjENCj4gPj4NCg0K