* [PATCH] USB: serial: sierra: fix urb leak on write completion
@ 2026-10-09 12:33 Johan Hovold
2026-10-09 12:46 ` sashiko-bot
2026-10-11 13:42 ` Greg KH
0 siblings, 2 replies; 3+ messages in thread
From: Johan Hovold @ 2026-10-09 12:33 UTC (permalink / raw)
To: Johan Hovold; +Cc: linux-usb, linux-kernel, Wentao Liang, stable, Oliver Neukum
Make sure to drop the reference taken by usb_anchor_urb() also on
successful submission of delayed write URBs during runtime resume to
prevent them from leaking on completion.
Fixes: e6929a9020ac ("USB: support for autosuspend in sierra while online")
Reported-by: Wentao Liang <vulab@iscas.ac.cn>
Link: https://lore.kernel.org/20260916165352.2085480-1-vulab@iscas.ac.cn
Cc: stable@vger.kernel.org # 2.6.32
Cc: Oliver Neukum <oliver@neukum.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
---
drivers/usb/serial/sierra.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/usb/serial/sierra.c b/drivers/usb/serial/sierra.c
index 6e443aacae07..f2cc7f364d20 100644
--- a/drivers/usb/serial/sierra.c
+++ b/drivers/usb/serial/sierra.c
@@ -972,12 +972,13 @@ static int sierra_submit_delayed_urbs(struct usb_serial_port *port)
intfdata->in_flight--;
usb_unanchor_urb(urb);
kfree(urb->transfer_buffer);
- usb_free_urb(urb);
spin_lock(&portdata->lock);
portdata->outstanding_urbs--;
spin_unlock(&portdata->lock);
}
+
+ usb_put_urb(urb);
}
if (ec)
--
2.55.0
^ permalink raw reply related [flat|nested] 3+ messages in thread* Re: [PATCH] USB: serial: sierra: fix urb leak on write completion 2026-10-09 12:33 [PATCH] USB: serial: sierra: fix urb leak on write completion Johan Hovold @ 2026-10-09 12:46 ` sashiko-bot 2026-10-11 13:42 ` Greg KH 1 sibling, 0 replies; 3+ messages in thread From: sashiko-bot @ 2026-10-09 12:46 UTC (permalink / raw) To: Johan Hovold; +Cc: linux-usb > Make sure to drop the reference taken by usb_anchor_urb() also on > successful submission of delayed write URBs during runtime resume to > prevent them from leaking on completion. > > Fixes: e6929a9020ac ("USB: support for autosuspend in sierra while online") > Reported-by: Wentao Liang <vulab@iscas.ac.cn> > Link: https://lore.kernel.org/20260916165352.2085480-1-vulab@iscas.ac.cn > Cc: stable@vger.kernel.org # 2.6.32 > Cc: Oliver Neukum <oliver@neukum.org> > Signed-off-by: Johan Hovold <johan@kernel.org> Sashiko has reviewed this patch and found no issues. It looks great! -- Sashiko AI review · https://sashiko.dev/#/patchset/20261009123359.465071-1-johan@kernel.org?part=1 ^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [PATCH] USB: serial: sierra: fix urb leak on write completion 2026-10-09 12:33 [PATCH] USB: serial: sierra: fix urb leak on write completion Johan Hovold 2026-10-09 12:46 ` sashiko-bot @ 2026-10-11 13:42 ` Greg KH 1 sibling, 0 replies; 3+ messages in thread From: Greg KH @ 2026-10-11 13:42 UTC (permalink / raw) To: Johan Hovold; +Cc: linux-usb, linux-kernel, Wentao Liang, stable, Oliver Neukum On Fri, Oct 09, 2026 at 02:33:59PM +0200, Johan Hovold wrote: > Make sure to drop the reference taken by usb_anchor_urb() also on > successful submission of delayed write URBs during runtime resume to > prevent them from leaking on completion. > > Fixes: e6929a9020ac ("USB: support for autosuspend in sierra while online") > Reported-by: Wentao Liang <vulab@iscas.ac.cn> > Link: https://lore.kernel.org/20260916165352.2085480-1-vulab@iscas.ac.cn > Cc: stable@vger.kernel.org # 2.6.32 > Cc: Oliver Neukum <oliver@neukum.org> > Signed-off-by: Johan Hovold <johan@kernel.org> Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> ^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2026-10-11 13:42 UTC | newest] Thread overview: 3+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2026-10-09 12:33 [PATCH] USB: serial: sierra: fix urb leak on write completion Johan Hovold 2026-10-09 12:46 ` sashiko-bot 2026-10-11 13:42 ` Greg KH
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox