mirror of
https://github.com/torvalds/linux.git
synced 2026-10-07 19:16:02 +02:00
mctp_i3c_probe() drops busdevs_lock after finding the matching bus. A
concurrent I3C_NOTIFY_BUS_REMOVE can then unregister and free the bus
netdev before probe passes its private data to mctp_i3c_add_device().
The latter consequently adds a list node through a freed mbus pointer.
Keep busdevs_lock held until the device has been added. This also
satisfies the __must_hold annotation on mctp_i3c_add_device().
Fixes:
|
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| mctp-i2c.c | ||
| mctp-i3c.c | ||
| mctp-serial.c | ||
| mctp-usb.c | ||
| mctp-usblib-test.c | ||
| mctp-usblib.c | ||