RE: [PATCH] phy: renesas: rcar-gen3-usb2: Fix use-after-free in rcar_gen3_phy_usb2_remove due to race condition

Biju Das <[email protected]> Tue, 4 Aug 2026 09:38:36 +0000
Newsgroups org.kernel.vger.linux-renesas-soc,org.infradead.lists.linux-phy,org.kernel.vger.linux-kernel
Message-ID <TYCPR01MB11332566338565BC938D459D686D42@TYCPR01MB11332.jpnprd01.prod.outlook.com>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