On Mon, 12 May 2025 23:24:19 +0800, Rong Zhang wrote:
The current HID bpf implementation assumes no output report/request will go through it after hid_bpf_destroy_device() has been called. This leads to a bug that unplugging certain types of HID devices causes a cleaned- up SRCU to be accessed. The bug was previously a hidden failure until a recent x86 percpu change [1] made it access not-present pages.
The bug will be triggered if the conditions below are met:
[...]
Applied to hid/hid.git (for-6.15/upstream-fixes), thanks!
[1/1] HID: bpf: abort dispatch if device destroyed https://git.kernel.org/hid/hid/c/578e1b96fad7
Cheers,