On Wed, Dec 11, 2019 at 08:31:49PM +0800, Mao Wenan wrote:
From: Oliver Neukum oneukum@suse.com
mainline inclusion from mainline-5.3 commit c468a8aa790e0dfe0a7f8a39db282d39c2c00b46 category: bugfix bugzilla: NA DTS: NA CVE: CVE-2019-19528
We have to drop the mutex before we close() upon disconnect() as close() needs the lock. This is safe to do by dropping the mutex as intfdata is already set to NULL, so open() will fail.
Fixes: 03f36e885fc26 ("USB: open disconnect race in iowarrior") Reported-by: syzbot+a64a382964bf6c71a9c0@syzkaller.appspotmail.com Cc: stable stable@vger.kernel.org Signed-off-by: Oliver Neukum oneukum@suse.com Link: https://lore.kernel.org/r/20190808092728.23417-1-oneukum@suse.com Signed-off-by: Greg Kroah-Hartman gregkh@linuxfoundation.org Signed-off-by: Mao Wenan maowenan@huawei.com
drivers/usb/misc/iowarrior.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-)
Why are you cc:ing us all on these patches???