Re: [PATCH v2] HID: mcp-2221: prevent UAF in delayed work

From: Jiri Kosina
Date: Mon Feb 20 2023 - 04:10:07 EST


On Thu, 16 Feb 2023, Benjamin Tissoires wrote:

> If the device is plugged/unplugged without giving time for mcp_init_work()
> to complete, we might kick in the devm free code path and thus have
> unavailable struct mcp_2221 while in delayed work.
>
> Canceling the delayed_work item is enough to solve the issue, because
> cancel_delayed_work_sync will prevent the work item to requeue itself.
>
> Signed-off-by: Benjamin Tissoires <benjamin.tissoires@xxxxxxxxxx>

Acked-by: Jiri Kosina <jkosina@xxxxxxx>

Thanks Benjamin.

--
Jiri Kosina
SUSE Labs