Re: [syzbot] [usb?] KASAN: slab-use-after-free Read in usbhid_raw_request

Edward Adam Davis
2025-02-06T02:40:29Z

#syz test

diff --git a/drivers/hid/hid-corsair-void.c b/drivers/hid/hid-corsair-void.c
index 6ece56b850fc..83d65fa29a5a 100644
--- a/drivers/hid/hid-corsair-void.c
+++ b/drivers/hid/hid-corsair-void.c
@@ -727,6 +727,7 @@ static void corsair_void_remove(struct hid_device *hid_dev)
power_supply_unregister(drvdata->battery);

cancel_delayed_work_sync(&drvdata->delayed_firmware_work);
+ cancel_delayed_work_sync(&drvdata->delayed_status_work);
sysfs_remove_group(&hid_dev->dev.kobj, &corsair_void_attr_group);
}