From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-lf0-f66.google.com ([209.85.215.66]:33801 "EHLO mail-lf0-f66.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750852AbcEHSIR (ORCPT ); Sun, 8 May 2016 14:08:17 -0400 From: Johan Hovold To: linux-usb@vger.kernel.org Cc: stable@vger.kernel.org, Johan Hovold Subject: [PATCH 0/8] USB: serial: fix interface URB leaks and use-after-free Date: Sun, 8 May 2016 20:07:55 +0200 Message-Id: <1462730883-9025-1-git-send-email-johan@kernel.org> Sender: stable-owner@vger.kernel.org List-ID: This series fixes a number of issues where resources were not properly released on probe errors. Typically, URBs allocated and submitted in an attach callback were never unlinked or released in a matching release callback. This could lead to memory leaks and use-after-free bugs as we could end up with unbound interfaces with active URBs. Included is also a couple of minor fixes and clean ups of the keyspan driver, and a fix of how we deal with minor-number exhaustion in core. Johan Johan Hovold (8): USB: serial: io_edgeport: fix memory leaks in attach error path USB: serial: io_edgeport: fix memory leaks in probe error path USB: serial: keyspan: fix use-after-free in probe error path USB: serial: keyspan: fix URB unlink USB: serial: keyspan: fix debug and error messages USB: serial: mxuport: fix use-after-free in probe error path USB: serial: quatech2: fix use-after-free in probe error path USB: serial: fix minor-number allocation drivers/usb/serial/io_edgeport.c | 56 +++++++++++++++++++++---------- drivers/usb/serial/keyspan.c | 72 ++++++++++++++++++++++------------------ drivers/usb/serial/mxuport.c | 10 ++++++ drivers/usb/serial/quatech2.c | 1 + drivers/usb/serial/usb-serial.c | 3 +- 5 files changed, 90 insertions(+), 52 deletions(-) -- 2.7.3