Johan Hovold c63d3cf5ba USB: legousbtower: fix use-after-free on release ...

commit 726b55d0e2 upstream.

The driver was accessing its struct usb_device in its release()
callback without holding a reference. This would lead to a
use-after-free whenever the device was disconnected while the character
device was still open.

Fixes: fef526cae7 ("USB: legousbtower: remove custom debug macro")
Cc: stable <stable@vger.kernel.org>     # 3.12
Signed-off-by: Johan Hovold <johan@kernel.org>
Link: https://lore.kernel.org/r/20191009153848.8664-5-johan@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-15 14:49:19 +09:00

..

sisusbvga

USB: sisusbvga: fix oops in error path of sisusb_probe

2023-05-15 13:40:00 +09:00

adutux.c

USB: adutux: fix use-after-free on release

2023-05-15 14:48:42 +09:00

appledisplay.c

usb: appledisplay: Add 27" Apple Cinema Display

2023-05-15 10:25:58 +09:00

chaoskey.c

USB: chaoskey: fix use-after-free on release

2023-05-15 14:48:51 +09:00

cypress_cy7c63.c

usb: misc: cypress_cy7c63: don't print on ENOMEM

2016-08-30 19:17:37 +02:00

cytherm.c

usb: misc: cytherm: don't print on ENOMEM

2016-08-30 19:17:38 +02:00

ehset.c

usb: ehci: Add support for SINGLE_STEP_SET_FEATURE test of EHSET

2013-08-12 13:13:32 -07:00

emi26.c

usb: delete non-required instances of include <linux/init.h>

2014-01-08 15:01:39 -08:00

emi62.c

usb: delete non-required instances of include <linux/init.h>

2014-01-08 15:01:39 -08:00

ezusb.c

ezusb: constify local structures

2016-09-13 17:24:24 +02:00

ftdi-elan.c

usb: misc: ftdi-elan: don't print on ENOMEM

2016-08-30 19:17:38 +02:00

idmouse.c

USB: idmouse: fix NULL-deref at probe

2017-03-30 09:41:24 +02:00

iowarrior.c

USB: iowarrior: fix use-after-free after driver unbind

2023-05-15 14:48:47 +09:00

isight_firmware.c

Merge branch 'usb-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

2012-01-09 12:09:47 -08:00

Kconfig

USB: rio500: Remove Rio 500 kernel driver

2023-05-15 14:48:20 +09:00

ldusb.c

USB: ldusb: fix NULL-derefs on driver unbind

2023-05-15 14:48:52 +09:00

legousbtower.c

USB: legousbtower: fix use-after-free on release

2023-05-15 14:49:19 +09:00

lvstest.c

usb: misc: lvs: fix race condition in disconnect handling

2018-03-22 09:17:40 +01:00

Makefile

USB: rio500: Remove Rio 500 kernel driver

2023-05-15 14:48:20 +09:00

trancevibrator.c

usb: misc: trancevibrator: don't print on ENOMEM

2016-08-30 19:17:38 +02:00

ucsi.c

usb: Add driver for UCSI

2016-04-29 15:29:18 -07:00

ucsi.h

usb: Add driver for UCSI

2016-04-29 15:29:18 -07:00

usb3503.c

usb: misc: usb3503: make sure reset is low for at least 100us

2018-01-17 09:38:55 +01:00

usb4604.c

usb: misc: Add driver for usb4604

2016-08-09 15:49:01 +02:00

usb_u132.h

Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/usb-2.6

2006-12-01 16:41:58 -08:00

usblcd.c

USB: usblcd: fix I/O after disconnect

2023-05-15 14:49:04 +09:00

usbsevseg.c

usb: misc: usbsevseg: don't print on ENOMEM

2016-08-30 19:17:38 +02:00

usbtest.c

usb: usbtest: fix NULL pointer dereference

2017-11-18 11:22:24 +01:00

uss720.c

usb: misc: uss720: Fix two sleep-in-atomic-context bugs

2023-05-15 08:20:36 +09:00

yurex.c

USB: yurex: fix NULL-derefs on disconnect

2023-05-15 14:48:25 +09:00