diff options
| author | Xu Rao <raoxu@uniontech.com> | 2026-06-26 14:46:17 +0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2026-07-08 13:29:57 +0200 |
| commit | 30adce93d5c4a5a1ec29d9249e3fdfcc391d406b (patch) | |
| tree | 7fe5354dc5a732a37f466d972e87771ec23d791d /rust/zerocopy/src/pointer/git@git.tavy.me:linux-stable.git | |
| parent | c5371e0b91b24159a3ebaa61e70b0980bcf03c0a (diff) | |
usb: gadget: f_printer: take kref only for successful open
printer_open() returns -EBUSY when the character device is already
open, but it increments dev->kref regardless of the return value. VFS
does not call ->release() for a failed open, so every rejected second
open permanently leaks one reference.
Move kref_get() into the successful-open branch.
Fixes: e8d5f92b8d30 ("usb: gadget: function: printer: fix use-after-free in __lock_acquire")
Cc: stable <stable@kernel.org>
Signed-off-by: Xu Rao <raoxu@uniontech.com>
Link: https://patch.msgid.link/80295742B820DA9B+20260626064617.4090626-1-raoxu@uniontech.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'rust/zerocopy/src/pointer/git@git.tavy.me:linux-stable.git')
0 files changed, 0 insertions, 0 deletions