[Home]

Issue of the Implementation # L0292

Brief

video: fbdev: udlfb: Fix use after free on dlfb_usb_probe error path

Detailed Description

If dlfb_usb_probe drops to error path then there is only one kref_init() call and no kref_get(), so second kref_put() leads to use after free.

Component

linux-kernel 4.13

Accepted

https://patchwork.kernel.org/patch/9895789/
commit

Status

Fixed in kernel 4.14-rc1

[Home]