From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pl1-f182.google.com (mail-pl1-f182.google.com [209.85.214.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CCBEB3546EB for ; Wed, 10 Jun 2026 17:59:00 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.182 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781114343; cv=none; b=oP9YDZx+HtwL+Co7RLnCm7KeKo4lglPLtxGKhJ22JnObFR0PbTgi+J8AUkMuIvgAtdc+cmKJZXFN/c4i7CxZRiYZEDtP7itqCS3VfmgIZJ5sL4c9ayOIFgr+ETBnUpKVDg9CfABJ17rsKqCJ58axTUPC6bGDGT4vckCxdv6sgTo= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781114343; c=relaxed/simple; bh=rjDwk63GlpD6IcSyJ6iGWBTG0j4qGvoDZhdWCYjXdCo=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=QBBWTsI8nweDX+2SQODrj6frfT9Qo95eZ5etWQZVU0nldfomaEtYtqdMv1kZTh5cVCRRNIW2njKl9xtnTI3VgOwFW0gmqIWnTe6ZGPWdOqFoF745Iwm8R9Uh1f4oWXTKFzeGnTWAhjBvMvmiMm81xwe9D9LWYpqDvWcI8nTLoaA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=eQdS6bnK; arc=none smtp.client-ip=209.85.214.182 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="eQdS6bnK" Received: by mail-pl1-f182.google.com with SMTP id d9443c01a7336-2bf22c18ad3so13325ad.0 for ; Wed, 10 Jun 2026 10:59:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1781114340; x=1781719140; darn=vger.kernel.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=aDcoxqooq3aEAqC8ohG0LuHtDb4TZolRXl4+Rn70IsU=; b=eQdS6bnKf8OFjYdZWTGgi6/DB/Hk2p7zbEYwc/MsYJpMNpd5U/+hJIeUFJMhgboGdC qIEibdadVSNL99aVgECMz5I666Z/PbQYqOi2NnWTsve9F2964/SBEquLWuJiSEjTgZQK fC4FvZCzWIZPtiImHSf3QQvzaM72vUWxewuGI2j4GP1aQjoTtSRNPtEbLbdZ3qjLWaEW 0doAE+5G0hN30YpVfya2FQ/6/pNCRtxqQjgJ0hRRG/Cyn+SQzmAEiS/R8TwXkCT7WEtV DnMXQ7eQxGfwQi+Sh+TiylbqIuI9t9Z2EUdnzzX0tGJfPv3dYpbyaoI0qG1556njWiIE +Hyg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781114340; x=1781719140; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=aDcoxqooq3aEAqC8ohG0LuHtDb4TZolRXl4+Rn70IsU=; b=qE5l6NuBa/7hgMU+ZUevTQYT2E2fmbC1hIFzPFSHxfRURRq0QAl/bI8y28CT8BLNHu QYD0KhUNgzlJ+Fk0JH1MX9SRAV2ldJLx0azM0CM3vMs3dnevCzCHsTa+W80IZAF/v3nK cYPa78gWlN0d6ZuTOn5qNtnenIIeJT5pWNsVrnAuLm+0xFkoXaOC9725L7vnyTnrjq4B WIGeH5Wu+S687x7gAP3cj9vszAifmULSsOqdZntJWAITezugGijSGC9YyExGzfdTo1oZ 6k3V/5vkgbzGpq6DmhGBu6Qzl+TBuDnefUBTAvMQHuOuVfCMHY0ZTtA5JK6k7Iczt4gK s6mQ== X-Forwarded-Encrypted: i=1; AFNElJ9G+pYjldqJqikN+eTxdU4TgI8pgqPKets1N0WFdgGbAulhHmA7Y01qwnvx7LA9NVabayiLzM9IA+46K4I=@vger.kernel.org X-Gm-Message-State: AOJu0YwxD79pP1Nxw7WBjAq4bZ63HBQGGItDNjV9n4LjCL08Xlqysa7u U7MPTJYMhO3oOB5KrO84iOX9klvaZaIfPi0reNOyymANQULgPLHGJZj4jOC0HAaRGw== X-Gm-Gg: Acq92OGilk3BnR+rYzsek2716NGRTLfxbcwbzYk2rlxnA2KknruS2uyWDBlFr3QYJRu N0gDnkvSWrjm+LELlkHr0CVtRygMuTMliCmHlLsdjlgawFnSJlX2/uG4z2Z1vonMorOe1YV9kGS 6YxH6SpqpkfsiloPal/EVemPetFtiDnU4FLweFTroOqdNoSsJy8GbJ9Lij67ItI7W9pjgLpPxOb avnhN3Pczo5qEAWQ8I2wKgU8oXAvp618VwxZJ8P8Zmyi3w6A9ccd8HyYYaV12UnH4+T4nOT6jAj YzzvpVC9F4QPOBoWtad4+d0NGzDX4YWmzqDBxMsC4itqNl4Hfo90Z8NJCO6D5TXgynv5Rv0NmCG BdM/Gy2sL14mATihOetKLo65zc3nMdJ294fAk06NYsR5RVo89otNJBQJeYy8v8iHYMzPjAKl3jA upkgXJ7JgSuZt7UplGCJT9tRQ1oHRzvFB7SbH+07svIH79A+DjhpPy2t1YgCINMaLwqlfVnNmuf XqERWGZ8ujzXIoVp8RiibxKe6fK6karHjO/goC7kGbLqcks3IRUWKge X-Received: by 2002:a17:902:e84e:b0:2bf:749:551 with SMTP id d9443c01a7336-2c2d93c9b9cmr564445ad.22.1781114339342; Wed, 10 Jun 2026 10:58:59 -0700 (PDT) Received: from google.com (112.174.16.34.bc.googleusercontent.com. [34.16.174.112]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-8428221a7e9sm33046676b3a.11.2026.06.10.10.58.57 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 10:58:58 -0700 (PDT) Date: Wed, 10 Jun 2026 17:58:54 +0000 From: Carlos Llamas To: Sasha Levin Cc: gregkh@linuxfoundation.org, stable@vger.kernel.org, khtsai@google.com, patches@lists.linux.dev, linux-kernel@vger.kernel.org, raubcameo@gmail.com, andrzej.p@samsung.com, balbi@ti.com, kyungmin.park@samsung.com, linux-usb@vger.kernel.org, Jianqiang kang Subject: Re: [PATCH 6.6.y] usb: gadget: f_ncm: Fix net_device lifecycle with device_move Message-ID: References: <20260608053636.2797024-1-jianqkang@sina.cn> <20260608-stable-reply-0013@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20260608-stable-reply-0013@kernel.org> On Mon, Jun 08, 2026 at 08:51:59PM -0400, Sasha Levin wrote: > > [PATCH 6.6.y] usb: gadget: f_ncm: Fix net_device lifecycle with device_move > > I can't take this one (6.6 or 6.1) on its own. ec35c1969650 alone opens a > userspace-reachable NULL deref in eth_get_drvinfo() that is later closed > upstream by e002e92e88e1 ("usb: gadget: u_ether: Fix NULL pointer deref in > eth_get_drvinfo"), so applying this commit by itself trades a UAF for a DoS. > > Please send a complete backport that also includes e002e92e88e124 (as the > follow-up patch in the same series) for both 6.6.y and 6.1.y, and I'll queue > them together. I just ran this patch plus a cherry-pick of e002e92e88e1 that you mentioned through Android's CI with no issues. Same goes with 6.1.y, so I can send Jianqiang's backports with the fix added to them. Cheers, -- Carlos Llamas