Re: [PATCH] drm/xe/i2c: Fix use-after-free on driver unload

[Heikki Krogerus <heikki.krogerus@linux.intel.com>]

On Mon, Oct 12, 2026 at 05:16:16PM +0530, Kumar G, Naresh wrote:
> Hi Bala,
> 
> I was investigating this issue earlier in sometime and found the root cause
> in software _node_notify_remove().
> 
> It is a kind of ownership bug in driver/base/swnode.c
> sofware_node_notify_remove(). when a manged swnode is mirrored onto a
> 
> second device(which is exactly what i2c-core does for the adapter's own
> struct device), the old code does an extra
> set_secondary_fwnode()/swnode_put()
> 
> for every device that tears down, not just the true owner. this is a
> double-release/UAF risk. The following fix solves the issue without changing
> i2c adapter registration flow.
> 
> The following code patch is suggested/provided to @heikki: waiting for his
> inputs on the same.

As I already explained you guys before, you don't need my ACK for
that. I have not input for it.

Br,

-- 
heikki