media: rc: uevent sysfs file races with rc_unregister_device()
authorSean Young <sean@mess.org>
Sat, 8 Aug 2020 11:19:12 +0000 (13:19 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 9 Sep 2020 17:14:29 +0000 (19:14 +0200)
commit9af0c46a761293ef04c57f001cc2641d4ec1add3
treefd3c832fa1ca3361b40fe82f02fcd795a2820a3c
parentbff924ee40ae3857e7373536fdda203378795e3c
media: rc: uevent sysfs file races with rc_unregister_device()

commit 4f0835d6677dc69263f90f976524cb92b257d9f4 upstream.

Only report uevent file contents if device still registered, else we
might read freed memory.

Reported-by: syzbot+ceef16277388d6f24898@syzkaller.appspotmail.com
Cc: Hillf Danton <hdanton@sina.com>
Cc: <stable@vger.kernel.org> # 4.16+
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/rc/rc-main.c