diff options
| author | Dmitry Torokhov <dmitry.torokhov@gmail.com> | 2025-03-11 08:24:16 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-04-15 18:04:35 +0300 |
| commit | 18daa52418e7e4629ed1703b64777294209d2622 (patch) | |
| tree | 8039b3bc6b139d7e1aa53387cf89c3f1842050d0 /rust/helpers/err.c | |
| parent | 04d3e5461c1f5cf8eec964ab64948ebed826e95e (diff) | |
| download | linux-18daa52418e7e4629ed1703b64777294209d2622.tar.xz | |
driver core: fix potential NULL pointer dereference in dev_uevent()
If userspace reads "uevent" device attribute at the same time as another
threads unbinds the device from its driver, change to dev->driver from a
valid pointer to NULL may result in crash. Fix this by using READ_ONCE()
when fetching the pointer, and take bus' drivers klist lock to make sure
driver instance will not disappear while we access it.
Use WRITE_ONCE() when setting the driver pointer to ensure there is no
tearing.
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Reviewed-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Link: https://lore.kernel.org/r/20250311052417.1846985-3-dmitry.torokhov@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'rust/helpers/err.c')
0 files changed, 0 insertions, 0 deletions