Yang Yingliang a16162a174 phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() ... [ Upstream commit e1723d8b87 ] This driver's remove path calls cancel_delayed_work(). However, that function does not wait until the work function finishes. This means that the callback function may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling cancel_delayed_work_sync(), which ensures that the work is properly cancelled, no longer running, and unable to re-schedule itself. Reported-by: Hulk Robot <hulkci@huawei.com> Signed-off-by: Yang Yingliang <yangyingliang@huawei.com> Link: https://lore.kernel.org/r/20210407092716.3270248-1-yangyingliang@huawei.com Signed-off-by: Vinod Koul <vkoul@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-05-11 14:47:21 +02:00
..
accessibility
acpi	ACPI: custom_method: fix a possible memory leak	2021-05-11 14:47:12 +02:00
amba	amba: Fix resource leak for drivers without .remove	2021-03-04 11:38:02 +01:00
android
ata
atm	atm: idt77252: fix null-ptr-dereference	2021-03-30 14:31:50 +02:00
auxdisplay	auxdisplay: ht16k33: Fix refresh rate handling	2021-03-04 11:38:00 +01:00
base	driver core: Fix locking bug in deferred_probe_timeout_work_func()	2021-04-14 08:42:03 +02:00
bcma
block	null_blk: fix command timeout completion handling	2021-04-16 11:43:21 +02:00
bluetooth	Bluetooth: btqca: Add valid le states quirk	2021-03-11 14:17:22 +01:00
bus	bus: mhi: core: Clear context for stopped channels from remove()	2021-05-11 14:47:19 +02:00
cdrom
char	random: initialize ChaCha20 constants with correct endianness	2021-05-11 14:47:19 +02:00
clk	clk: socfpga: fix iomem pointer cast on 64-bit	2021-04-14 08:42:12 +02:00
clocksource	clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined	2021-03-04 11:37:57 +01:00
connector
counter	counter: stm32-timer-cnt: fix ceiling miss-alignment with reload register	2021-03-25 09:04:16 +01:00
cpufreq	cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev	2021-03-30 14:31:49 +02:00
cpuidle	cpuidle: tegra: Fix C7 idling state on Tegra114	2021-05-11 14:47:16 +02:00
crypto	crypto: hisilicon/sec - fixes a printing error	2021-05-11 14:47:17 +02:00
dax	device-dax: Fix default return code of range_parse()	2021-03-04 11:38:15 +01:00
dca
devfreq
dio
dma	dmaengine: tegra20: Fix runtime PM imbalance on error	2021-04-28 13:40:01 +02:00
dma-buf
edac	EDAC/amd64: Do not load on family 0x15, model 0x13	2021-03-07 12:34:08 +01:00
eisa
extcon	extcon: Fix error handling in extcon_dev_register	2021-04-07 15:00:11 +02:00
firewire	firewire: nosy: Fix a use-after-free bug in nosy_ioctl()	2021-04-07 15:00:11 +02:00
firmware	efi/libstub: Add $(CLANG_FLAGS) to x86 flags	2021-05-11 14:47:18 +02:00
fpga	fpga: dfl: pci: add DID for D5005 PAC cards	2021-05-11 14:47:19 +02:00
fsi
gnss
gpio	gpio: omap: Save and restore sysconfig	2021-04-28 13:39:59 +02:00
gpu	drm/msm: Fix a5xx/a6xx timestamps	2021-04-21 13:00:52 +02:00
greybus
hid	HID: wacom: Assign boolean values to a bool variable	2021-04-28 13:40:01 +02:00
hsi
hv
hwmon
hwspinlock
hwtracing	intel_th: Consistency and off-by-one fix	2021-05-11 14:47:21 +02:00
i2c	i2c: designware: Adjust bus_freq_hz when refuse high speed mode set	2021-04-14 08:42:11 +02:00
i3c
ide	ide/falconide: Fix module unload	2021-03-04 11:38:21 +01:00
idle
iio	iio: hid-sensor-temperature: Fix issues of timestamp channel	2021-03-25 09:04:16 +01:00
infiniband	RDMA/addr: Be strict with gid size	2021-04-14 08:42:12 +02:00
input	Input: i8042 - fix Pegatron C15B ID entry	2021-04-21 13:00:54 +02:00
interconnect	interconnect: core: fix error return code of icc_link_destroy()	2021-04-16 11:43:19 +02:00
iommu	iommu/amd: Fix performance counter initialization	2021-03-17 17:06:24 +01:00
ipack
irqchip	irqchip/gic-v3: Do not enable irqs when handling spurious interrups	2021-05-11 14:47:15 +02:00
isdn	mISDN: fix crash in fritzpci	2021-04-10 13:36:08 +02:00
leds
lightnvm
macintosh
mailbox	mailbox: sprd: correct definition of SPRD_OUTBOX_FIFO_FULL	2021-03-04 11:38:15 +01:00
mcb
md	dm verity fec: fix misaligned RS roots IO	2021-04-21 13:00:54 +02:00
media	media: rc: compile rc-cec.c into rc-core	2021-03-17 17:06:20 +01:00
memory
memstick
message
mfd	mfd: gateworks-gsc: Fix interrupt type	2021-03-04 11:38:40 +01:00
misc	mei: me: add Alder Lake P device id.	2021-05-02 11:06:09 +02:00
mmc	mmc: core: Fix hanging on I/O during system suspend for removable cards	2021-05-11 14:47:14 +02:00
most
mtd	mtd: physmap: physmap-bt1-rom: Fix unintentional stack access	2021-05-11 14:47:13 +02:00
mux
net	staging: wimax/i2400m: fix byte-order issue	2021-05-11 14:47:16 +02:00
nfc
ntb
nubus
nvdimm	libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC	2021-04-21 13:00:55 +02:00
nvme	nvme-pci: set min_align_mask	2021-05-07 11:04:32 +02:00
nvmem	nvmem: qcom-spmi-sdam: Fix uninitialized pdev pointer	2021-03-04 11:38:39 +01:00
of	of: property: fw_devlink: do not link ".*,nr-gpios"	2021-04-14 08:41:58 +02:00
opp
oprofile
parisc
parport
pci	PCI: PM: Do not read power state in pci_enable_device_flags()	2021-05-11 14:47:18 +02:00
pcmcia
perf	perf/arm_pmu_platform: Fix error handling	2021-05-11 14:47:19 +02:00
phy	phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()	2021-05-11 14:47:21 +02:00
pinctrl	pinctrl: core: Show pin numbers for the controllers with base = 0	2021-04-28 13:39:59 +02:00
platform	platform/x86: ISST: Account for increased timeout in some cases	2021-05-11 14:47:20 +02:00
pnp
power	power: supply: smb347-charger: Fix interrupt usage if interrupt is unavailable	2021-03-04 11:37:59 +01:00
powercap
pps
ps3
ptp	ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation	2021-04-10 13:36:09 +02:00
pwm	pwm: iqs620a: Fix overflow and optimize calculations	2021-03-04 11:38:17 +01:00
rapidio
ras	RAS/CEC: Correct ce_add_elem()'s returned values	2021-04-14 08:42:12 +02:00
regulator	regulator: bd9571mwv: Fix AVS and DVFS voltage range	2021-04-14 08:42:05 +02:00
remoteproc	remoteproc: qcom: pil_info: avoid 64-bit division	2021-04-14 08:42:05 +02:00
reset
rpmsg
rtc	rtc: zynqmp: depend on HAS_IOMEM	2021-03-04 11:38:03 +01:00
s390	s390/zcrypt: fix zcard and zqueue hot-unplug memleak	2021-05-11 14:47:11 +02:00
sbus
scsi	scsi: mpt3sas: Block PCI config access from userspace during reset	2021-05-11 14:47:13 +02:00
sfi
sh
siox
slimbus
soc	soc/tegra: pmc: Fix completion of power-gate toggling	2021-05-11 14:47:18 +02:00
soundwire	soundwire: cadence: only prepare attached devices on clock stop	2021-05-11 14:47:19 +02:00
spi	spi: qup: fix PM reference leak in spi_qup_remove()	2021-05-11 14:47:20 +02:00
spmi	spmi: spmi-pmic-arb: Fix hw_irq overflow	2021-03-04 11:38:40 +01:00
ssb
staging	staging: rtl8192e: Change state information from u16 to u8	2021-04-07 15:00:13 +02:00
target	scsi: target: iscsi: Fix zero tag inside a trace event	2021-04-14 08:42:03 +02:00
tc
tee	tee: optee: do not check memref size on return from Secure World	2021-05-11 14:47:18 +02:00
thermal	thermal/core: Add NULL pointer check before using cooling device stats	2021-04-07 15:00:06 +02:00
thunderbolt	thunderbolt: Fix off by one in tb_port_find_retimer()	2021-04-14 08:42:03 +02:00
tty	tty: n_gsm: check error while registering tty devices	2021-05-11 14:47:21 +02:00
uio
usb	usb: dwc3: gadget: Check for disabled LPM quirk	2021-05-11 14:47:20 +02:00
vdpa	vdpa/mlx5: Set err = -ENOMEM in case dma_map_sg_attrs fails	2021-04-28 13:39:59 +02:00
vfio	vfio: Depend on MMU	2021-05-07 11:04:33 +02:00
vhost	vhost-vdpa: fix vm_flags for virtqueue doorbell mapping	2021-05-11 14:47:12 +02:00
video	fbdev: zero-fill colormap in fbcmap.c	2021-05-11 14:47:16 +02:00
virt	nitro_enclaves: Fix stale file descriptors on failed usercopy	2021-05-11 14:47:11 +02:00
virtio
visorbus
vlynq
vme
w1
watchdog	watchdog: mei_wdt: request stop on unregister	2021-03-04 11:38:36 +01:00
xen	xen/events: fix setting irq affinity	2021-04-16 11:43:22 +02:00
zorro
Kconfig
Makefile