diff options
| author | Stuart Hayhurst <stuart.a.hayhurst@gmail.com> | 2025-01-21 23:00:07 +0300 |
|---|---|---|
| committer | Jiri Kosina <jkosina@suse.com> | 2025-02-03 12:51:24 +0300 |
| commit | 48e487b002891eb0aeaec704c9bed51f028deff1 (patch) | |
| tree | 3f567dfc9293d13d5372f8943b91d0ee30bdfdc0 | |
| parent | 27c02784773a69fd896e42f3cec73be8c5c83c1f (diff) | |
| download | linux-48e487b002891eb0aeaec704c9bed51f028deff1.tar.xz | |
HID: corsair-void: Add missing delayed work cancel for headset status
The cancel_delayed_work_sync() call was missed, causing a use-after-free
in corsair_void_remove().
Reported-by: yan kang <kangyan91@outlook.com>
Reported-by: yue sun <samsun1006219@gmail.com>
Closes: https://lore.kernel.org/all/SY8P300MB042106286A2536707D2FB736A1E42@SY8P300MB0421.AUSP300.PROD.OUTLOOK.COM/
Closes: https://lore.kernel.org/all/SY8P300MB0421872E0AE934C9616FA61EA1E42@SY8P300MB0421.AUSP300.PROD.OUTLOOK.COM/
Fixes: 6ea2a6fd3872 ("HID: corsair-void: Add Corsair Void headset family driver")
Cc: stable@vger.kernel.org
Signed-off-by: Stuart Hayhurst <stuart.a.hayhurst@gmail.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
| -rw-r--r-- | drivers/hid/hid-corsair-void.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/hid/hid-corsair-void.c b/drivers/hid/hid-corsair-void.c index 6ece56b850fc..bd8f3d849b58 100644 --- a/drivers/hid/hid-corsair-void.c +++ b/drivers/hid/hid-corsair-void.c @@ -726,6 +726,7 @@ static void corsair_void_remove(struct hid_device *hid_dev) if (drvdata->battery) power_supply_unregister(drvdata->battery); + cancel_delayed_work_sync(&drvdata->delayed_status_work); cancel_delayed_work_sync(&drvdata->delayed_firmware_work); sysfs_remove_group(&hid_dev->dev.kobj, &corsair_void_attr_group); } |