diff options
| author | Biju Das <biju.das.jz@bp.renesas.com> | 2024-11-19 19:20:29 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2025-01-09 13:33:51 +0100 |
| commit | ca9d077350fa21897de8bf64cba23b198740aab5 (patch) | |
| tree | 0721c8889e68a4626848a647a8f583406f769f27 /kernel/trace | |
| parent | 9f12616222cee10a72abb5c063f9c90c42452c6a (diff) | |
| download | linux-ca9d077350fa21897de8bf64cba23b198740aab5.tar.gz linux-ca9d077350fa21897de8bf64cba23b198740aab5.tar.bz2 linux-ca9d077350fa21897de8bf64cba23b198740aab5.zip | |
drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
commit 81adbd3ff21c1182e06aa02c6be0bfd9ea02d8e8 upstream.
The host_node pointer was assigned and freed in adv7533_parse_dt(), and
later, adv7533_attach_dsi() uses the same. Fix this use-after-free issue
by dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()
in error path of probe() and also in the remove().
Fixes: 1e4d58cd7f88 ("drm/bridge: adv7533: Create a MIPI DSI device")
Cc: stable@vger.kernel.org
Reviewed-by: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com>
Signed-off-by: Biju Das <biju.das.jz@bp.renesas.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20241119192040.152657-2-biju.das.jz@bp.renesas.com
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'kernel/trace')
0 files changed, 0 insertions, 0 deletions