Linyu Yuan 0698f0209d usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io() ...

In ffs_epfile_io(), when read/write data in blocking mode, it will wait
the completion in interruptible mode, if task receive a signal, it will
terminate the wait, at same time, if function unbind occurs,
ffs_func_unbind() will kfree all eps, ffs_epfile_io() still try to
dequeue request by dereferencing ep which may become invalid.

Fix it by add ep spinlock and will not dereference ep if it is not valid.

Cc: <stable@vger.kernel.org> # 5.15
Reported-by: Michael Wu <michael@allwinnertech.com>
Tested-by: Michael Wu <michael@allwinnertech.com>
Reviewed-by: John Keeping <john@metanate.com>
Signed-off-by: Linyu Yuan <quic_linyyuan@quicinc.com>
Link: https://lore.kernel.org/r/1654863478-26228-3-git-send-email-quic_linyyuan@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-06-10 14:45:38 +02:00

..

atm

usb: remove third argument of usb_maxpacket()

2022-04-23 10:33:53 +02:00

c67x00

USB: c67x00: remove unnecessary check of res

2022-05-12 11:36:46 +02:00

cdns3

usb: cdnsp: Fixed setting last_trb incorrectly

2022-06-10 11:15:23 +02:00

chipidea

usb: udc: Fix typo in comment

2022-01-31 14:24:39 +01:00

class

tty: remove CMSPAR ifdefs

2022-05-19 18:26:16 +02:00

common

usb: common: usb-conn-gpio: Make VBUS supply completely optional

2022-03-15 18:22:15 +01:00

core

USB: new quirk for Dell Gen 2 devices

2022-05-20 21:18:23 +02:00

dwc2

usb: dwc2: Fix memory leak in dwc2_hcd_init

2022-06-10 11:12:20 +02:00

dwc3

USB: fixup for merge issue with "usb: dwc3: Don't switch OTG -> peripheral if extcon is present"

2022-06-10 11:19:42 +02:00

early

usb: early: xhci-dbc: Fix xdbc number parsing

2022-03-15 18:20:34 +01:00

gadget

usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io()

2022-06-10 14:45:38 +02:00

host

xhci: Fix null pointer dereference in resume if xhci has only one roothub

2022-06-10 13:57:20 +02:00

image

scsi: Remove drivers/scsi/scsi.h

2022-02-22 21:11:02 -05:00

isp1760

usb: isp1760: Fix out-of-bounds array access

2022-05-19 18:10:59 +02:00

misc

Revert "usb: misc: Add onboard_usb_hub driver"

2022-05-03 16:48:13 +02:00

mon

…

mtu3

usb: mtu3: fix USB 3.0 dual-role-switch from device to host

2022-04-21 19:06:41 +02:00

musb

usb: musb: mediatek: Use clk_bulk API to simplify clock operations

2022-04-21 19:23:46 +02:00

phy

Merge tag 'char-misc-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2022-06-03 11:36:34 -07:00

renesas_usbhs

usb: renesas_usbhs: Use platform_get_irq() to get the interrupt

2021-12-21 08:51:57 +01:00

roles

…

serial

USB: serial: option: add support for Cinterion MV31 with new baseline

2022-06-09 14:32:42 +02:00

storage

usb: remove third argument of usb_maxpacket()

2022-04-23 10:33:53 +02:00

typec

Merge tag 'char-misc-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2022-06-03 11:36:34 -07:00

usbip

usb: usbip: add missing device lock on tweak configuration cmd

2022-04-21 19:01:25 +02:00

Kconfig

…

Makefile

…

usb-skeleton.c

…