Re: [PATCH v6] usb: gadget: uvc: Fix Null Pointer Dereference in uvcg_video_init()
Xu Yang <[email protected]> Mon, 3 Aug 2026 13:49:37 +0800
| Newsgroups | org.kernel.vger.linux-usb,org.kernel.vger.linux-kernel,org.kernel.vger.stable |
|---|---|
| Message-ID | <uatwg23po5zuagx6k2gvmgwgdcsquxlmpm7n6milpvu65qvao4@jsxasxynd4di> |
On Mon, Aug 03, 2026 at 10:18:56AM +0530, Jeffin Philip wrote: > In uvcg_video_init(), if kthread_run_worker() fails, > the error logged uses uvcg_err(), however, the pointer it uses: > video->uvc is not assigned at this point, triggering a null > pointer dereference. Fix this by directly using uvc->func which > is assigned already. > > Reported-by: [email protected] > Closes: https://syzkaller.appspot.com/bug?extid=8dcac923582c28505fd7 > Fixes: 7ea95b110811 ("usb: gadget: uvc: rename functions to avoid conflicts with host uvc") No. The Fixes tag is not changed and still wrong.