Re: [PATCH v7] usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()

Xu Yang <[email protected]> Tue, 4 Aug 2026 17:03:38 +0800

Newsgroups	org.kernel.vger.linux-usb,org.kernel.vger.linux-kernel,org.kernel.vger.stable
Message-ID	<d62ux4m37z7xp2tt4k2voc55yold6khw5t2tiapctrumnmobng@goh7b7pur6s3>

On Tue, Aug 04, 2026 at 09:13:38AM +0530, Jeffin Philip wrote:
> In uvcg_video_init(), if kthread_run_worker() fails,
> the error logged uses uvcg_err(), however, the pointer it uses:
> video->uvc is not assigned at this point, triggering a null
> pointer dereference. Fix this by directly using uvc->func which
> is assigned already.
> 
> Reported-by: [email protected]
> Closes: https://syzkaller.appspot.com/bug?extid=8dcac923582c28505fd7
> Fixes: f0bbfbd16b3b ("usb: gadget: uvc: rework to enqueue in pump worker from encoded queue")
> Cc: [email protected]
> Signed-off-by: Jeffin Philip <[email protected]>

Reviewed-by: Xu Yang <[email protected]>