Files
twx-linux/include/linux
Dmitry Osipenko 18bbb1d165 usb: otg-fsm: Fix hrtimer list corruption
commit bf88fef0b6 upstream.

The HNP work can be re-scheduled while it's still in-fly. This results in
re-initialization of the busy work, resetting the hrtimer's list node of
the work and crashing kernel with null dereference within kernel/timer
once work's timer is expired. It's very easy to trigger this problem by
re-plugging USB cable quickly. Initialize HNP work only once to fix this
trouble.

 Unable to handle kernel NULL pointer dereference at virtual address 00000126)
 ...
 PC is at __run_timers.part.0+0x150/0x228
 LR is at __next_timer_interrupt+0x51/0x9c
 ...
 (__run_timers.part.0) from [<c0187a2b>] (run_timer_softirq+0x2f/0x50)
 (run_timer_softirq) from [<c01013ad>] (__do_softirq+0xd5/0x2f0)
 (__do_softirq) from [<c012589b>] (irq_exit+0xab/0xb8)
 (irq_exit) from [<c0170341>] (handle_domain_irq+0x45/0x60)
 (handle_domain_irq) from [<c04c4a43>] (gic_handle_irq+0x6b/0x7c)
 (gic_handle_irq) from [<c0100b65>] (__irq_svc+0x65/0xac)

Cc: stable@vger.kernel.org
Acked-by: Peter Chen <peter.chen@kernel.org>
Signed-off-by: Dmitry Osipenko <digetx@gmail.com>
Link: https://lore.kernel.org/r/20210717182134.30262-6-digetx@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-08-15 13:03:31 +02:00
..
2021-02-10 09:12:08 +01:00
2019-11-24 08:22:48 +01:00
2021-01-30 13:31:17 +01:00
2020-04-02 16:34:21 +02:00
2019-12-17 20:38:50 +01:00
2021-03-03 18:22:46 +01:00
2021-02-07 14:47:41 +01:00
2019-12-31 12:37:21 +01:00
2021-07-11 12:48:09 +02:00
2020-07-29 07:42:55 +02:00
2020-11-18 18:28:00 +01:00
2020-03-20 10:54:12 +01:00
2019-06-11 12:21:48 +02:00
2020-04-24 08:00:38 +02:00
2020-04-02 16:34:36 +02:00
2018-11-13 11:15:11 -08:00
2020-12-11 13:39:04 +01:00
2020-04-02 16:34:36 +02:00