diff options
| author | Gary Guo <gary@garyguo.net> | 2026-07-23 23:00:48 +0100 |
|---|---|---|
| committer | Bjorn Helgaas <bhelgaas@google.com> | 2026-07-28 11:20:29 -0500 |
| commit | 3ffc4c9690c33ee28cdb3d0182b12f9c623e3acc (patch) | |
| tree | a93f1782a83d2a7a1bd5fc586da175992bc15295 /scripts/Makefile.thinlto | |
| parent | 04fde70f782b6ce984f9f80c2023786caea28287 (diff) | |
| download | linux-stable-3ffc4c9690c33ee28cdb3d0182b12f9c623e3acc.tar.gz linux-stable-3ffc4c9690c33ee28cdb3d0182b12f9c623e3acc.zip | |
PCI: Fix UAF when probe runs concurrent to dyn ID removal
Dynamic IDs are only guaranteed to be valid when dynids.lock is held,
as remove_id_store() can free the node. Thus, make a copy in
pci_match_device(). Also, clarify that the id parameter is only valid
during probe.
Fixes: 0994375e9614 ("PCI: add remove_id sysfs entry")
Reported-by: Sashiko <sashiko-bot@kernel.org>
Link: https://lore.kernel.org/all/20260619170503.518F61F00A3A@smtp.kernel.org/
Signed-off-by: Gary Guo <gary@garyguo.net>
Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
Reviewed-by: Danilo Krummrich <dakr@kernel.org>
Link: https://patch.msgid.link/20260723-pci_id_fix-v4-9-3580726844e1@garyguo.net
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions