commit | c4ba329cabca7c839ab48fb58b5bcc2582951a48 | [log] [tgz] |
---|---|---|
author | Oliver Neukum <oneukum@suse.com> | Tue Mar 14 12:05:07 2017 +0100 |
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Thu Mar 16 18:01:02 2017 +0900 |
tree | b04794ac64f6884a77d2fab730266f95cb085963 | |
parent | e4ecd155d2a62246fc7722aeaa5819262904f40b [diff] |
usb: misc: lvs: fix race condition in disconnect handling There is a small window during which the an URB may remain active after disconnect has returned. If in that case already freed memory may be accessed and executed. The fix is to poison the URB befotre the work is flushed. Signed-off-by: Oliver Neukum <oneukum@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>