From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oi1-f169.google.com (mail-oi1-f169.google.com [209.85.167.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 727A42773DA for ; Tue, 14 Apr 2026 01:00:55 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.167.169 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776128459; cv=none; b=tn1EAbPJllqrbsgzQ3/qbEUGRR0l5PZfPBNKsqm4cpZRQCHlyP6vaXzRMeBXliWf2a3d68zJKftrEicyiq4IzPVqzhmjzpzPRatVCntbMLzuapkdEjcBuZV0J2Bjol8SH4KQ6ML9O3Y+P/M/fozTbtnazo5xlfRsWuTFLpCk+88= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776128459; c=relaxed/simple; bh=ApZcTILpNJF5dAfUkEoDylJFNWDnFzkVHuaISa4kGJM=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=MvpaGf8cipbdBsbLZ/Smn0r9eh2vu9dlGXlv+sglTJGyCvFsqa4RdobUrV7tDo3TiKxonkNmF2/LvdlG1KDb8Ay3N/guFSouoExhmXqTmg1O9T4/p+zR2md7jvOKEwPQQdIpFMHj8YXUNgy7F4XT+0/jzcCKfES6Cbouf60z/5U= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=adrianwowk.com; spf=pass smtp.mailfrom=adrianwowk.com; dkim=pass (2048-bit key) header.d=adrianwowk.com header.i=@adrianwowk.com header.b=e2YUwQxV; arc=none smtp.client-ip=209.85.167.169 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=adrianwowk.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=adrianwowk.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=adrianwowk.com header.i=@adrianwowk.com header.b="e2YUwQxV" Received: by mail-oi1-f169.google.com with SMTP id 5614622812f47-4704fb0d5b8so3209784b6e.0 for ; Mon, 13 Apr 2026 18:00:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=adrianwowk.com; s=google; t=1776128454; x=1776733254; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=bYzXa+htgRag7ZVpuOXHWhBtQy4YL7FzWs2tQv0w8Eg=; b=e2YUwQxVzfSyrwAPF9DzRN65AsV1GawSNtFEQBfV5jJjMj+MUOSVFUYfNVU38oZ2nr xpSPSmggb+f9zLjcL+5d4qgpogYJXSwoFQBdBuHMAzEoEpMo8Xw6NBupYORkw5iXql3l tpjVtsDSqMLUnSaWD3283nQLbOb5xtuRPZcHOL/hapmtH48Pxne+MPZefJjIfNDIT4iO kuTAYgFnYrQjwC7Cie4r/genUTAFqwKp6YChv/s7faY+MWToncbissUPrT2Asc0q4wb0 R1M3xqTmKTXTfVAlPZ+vExw+ymWLujX2j5M38lm6+RB3rsuUGYYl+MsxRIgBoQeKQYrt 57jQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776128454; x=1776733254; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=bYzXa+htgRag7ZVpuOXHWhBtQy4YL7FzWs2tQv0w8Eg=; b=Sm0VGoQkgJowMfdcHPs5R/gQPSQsp6fgo4BUc+T4MzqYMNMEBNTBaLpUpvXz0Xk8s7 xHandKqrmKHC6QBccw4fRXwhLiNmTX86Srn5xsBIr0HjXjaeM4pAxAVzTA5LbGzT/GZ4 9ZesWysBlWGVcBZuEN5Zv4e022VsmyB0aIk1Zx99Ui1GhOhGExAoE+BMWFLKnzGkl96G On1OKK23zUMySmhzTLcehDgUdvAHPM17xdKg5tZYmEhfJngQmHn5mhkRDQX8q1OzyNq1 Ro/zqubG6hXc5c8PGxhmhQlzMoJ9yTJZ2EX2QFeYiYaL1T7t0LxbQpWt5VmQJx8aejV0 kh2g== X-Forwarded-Encrypted: i=1; AFNElJ+fmSnSgY95xmuSV/4EEv/Ty1lzTpvZkdAfRozJrwlyR4oPUwQyX2BSC3WMWl/bJ9JcbiVznjcsFOFU8g0=@vger.kernel.org X-Gm-Message-State: AOJu0Yz6kkhwNj5Fn6iYStjdIplym+9s6vNYA+52YB0tSkA+zOitllA6 b+XRtcFxnGQh5yJWnOGC3gEJ9Aayl1nHJvPoQrXqAsWIgJWg1arYODeIv4rNakWSH+Q= X-Gm-Gg: AeBDieuzYBOATd8Xlfi1oSzJ1UjYYUhExq4Wsd05Y4+U+nvwT2cYsE/bf8Lpns2Bqkx KyT8xtC32ipACf+Xtnk25lTcvJFGuCfsLakezrb3WijfFLt5UmUV5XTLoSOxMjPKfDKMwEoTdy8 hwqUOQAQJav8CBZhIdQ1kSvgFEffgf8XKgtaGXPnocZsvsZjXJqGz4dCyghzDH1VsopmPqNhZ3c sm9s7yMuUX6DLnfca+CWuteSRTTI9hxAuLqUOE86QvD0CKhLFmiANJZLuy0qfq/honDG163dWKT 1iFubuG5gAJFvwTR6RztG4n6dSXUmIyc357C+0ojFpG378Vjj1aUn1BsOmPoXqL6wCoIAQhxZAv Pm3C6boDCsACtkDtBjDIn/kpHp0H3RdRiohIg3DWrNtM2veuq24F3/1mT0qBTzzHVzKq2xuop3Y BrUsEwd48m8uqEbQq2Vap3aM41otTlsUIgBJm8CIjNqw91ahp0MvcN X-Received: by 2002:a05:6808:d4e:b0:473:6344:de66 with SMTP id 5614622812f47-4772c385780mr9325323b6e.18.1776128454332; Mon, 13 Apr 2026 18:00:54 -0700 (PDT) Received: from linux-dev ([12.26.11.218]) by smtp.gmail.com with ESMTPSA id 46e09a7af769-7dc269d3255sm9964556a34.25.2026.04.13.18.00.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Apr 2026 18:00:53 -0700 (PDT) From: Adrian Wowk To: valentina.manea.m@gmail.com, shuah@kernel.org Cc: i@zenithal.me, gregkh@linuxfoundation.org, linux-usb@vger.kernel.org, linux-kernel@vger.kernel.org, Adrian Wowk Subject: [PATCH 0/2] usbip: vhci_hcd: fix NULL deref and NR_HCS upper bound Date: Mon, 13 Apr 2026 20:00:48 -0500 Message-ID: <20260414010050.158064-1-dev@adrianwowk.com> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit These two patches fix a NULL pointer dereference in vhci_sysfs.c triggered when a VHCI host controller fails to probe, and tighten the Kconfig upper bound for USBIP_VHCI_NR_HCS to reflect the real maximum imposed by USB_MAXBUS. Tested on Ubuntu 6.8.0-110-generic (6.8.12) on a Dell PowerEdge R640, issue is reproducible with CONFIG_USBIP_VHCI_NR_HCS > 32 or potentially lower if there is already other USB hardware connected. Adrian Wowk (2): usbip: vhci_hcd: fix NULL deref in status_show_vhci usbip: vhci_hcd: reduce CONFIG_USBIP_VHCI_NR_HCS upper bound to 32 drivers/usb/usbip/Kconfig | 2 +- drivers/usb/usbip/vhci_sysfs.c | 52 +++++++++++++++++++--------------- 2 files changed, 30 insertions(+), 24 deletions(-) -- 2.53.0