Skip to content
Commit 0546840f authored by Takashi Iwai's avatar Takashi Iwai Committed by Paul Gortmaker
Browse files

ALSA: line6: Sync the pending work cancel at disconnection



commit 68359a1a upstream.

Recently syzkaller reported a UAF in LINE6 driver, and it's likely
because we call cancel_delayed_work() at the disconnect callback
instead of cancel_delayed_work_sync().  Let's use the correct one
instead.

Reported-by: default avatar <syzbot+145012a46658ac00fc9e@syzkaller.appspotmail.com>
Suggested-by: default avatarAlan Stern <stern@rowland.harvard.edu>
Cc: <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/s5hlfjr4gio.wl-tiwai@suse.de


Signed-off-by: default avatarTakashi Iwai <tiwai@suse.de>
Signed-off-by: default avatarPaul Gortmaker <paul.gortmaker@windriver.com>
parent dd3dcf9d
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment