From: Greg KH <gregkh@linuxfoundation.org>
To: Jeffin Philip <jeffinphilip14@gmail.com>
Cc: i@zenithal.me, linux-kernel@vger.kernel.org,
linux-usb@vger.kernel.org, shuah@kernel.org,
stable@vger.kernel.org,
syzbot+af76b01c9a0f0ab60fb0@syzkaller.appspotmail.com,
valentina.manea.m@gmail.com
Subject: Re: [PATCH] usbip: usbip_host: Fix null pointer dereference in rebind_store
Date: Thu, 6 Aug 2026 07:42:27 +0200 [thread overview]
Message-ID: <2026080645-nickname-undated-d0bb@gregkh> (raw)
In-Reply-To: <20260806053651.25088-1-jeffinphilip14@gmail.com>
On Thu, Aug 06, 2026 at 11:06:51AM +0530, Jeffin Philip wrote:
> On Thu, Aug 06 2026, Greg KH wrote:
> >What prevents bid->udev from becoming NULL right after you checked this?
> We could use usb_get_dev() and hold a reference to udev when the busid_lock
> is being held and then release it after do_rebind, or would that be incorrect?
I do not know, try it and see!
> >How was this tested?
> The method to reproduce it is in the same thread.
How is this just now an issue? What changed to cause it to suddenly
start happening, or has this codepath never been tested?
thanks,
greg k-h
next prev parent reply other threads:[~2026-08-06 5:43 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-06 5:17 [PATCH] usbip: usbip_host: Fix null pointer dereference in rebind_store Jeffin Philip
2026-08-06 5:27 ` Jeffin Philip
2026-08-06 5:27 ` Greg KH
2026-08-06 5:36 ` Jeffin Philip
2026-08-06 5:42 ` Greg KH [this message]
2026-08-06 17:25 ` Jeffin Philip
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2026080645-nickname-undated-d0bb@gregkh \
--to=gregkh@linuxfoundation.org \
--cc=i@zenithal.me \
--cc=jeffinphilip14@gmail.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-usb@vger.kernel.org \
--cc=shuah@kernel.org \
--cc=stable@vger.kernel.org \
--cc=syzbot+af76b01c9a0f0ab60fb0@syzkaller.appspotmail.com \
--cc=valentina.manea.m@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox