Wentao Liang e194ce048f usb: musb: omap2430: Fix use-after-free in omap2430_probe() ...

In omap2430_probe(), of_node_put(np) is called prematurely before the
last access to np, leading to a use-after-free if the node's reference
count drops to zero. Move the of_node_put() calls after the last use of
np in both the success and error paths.

Fixes: ffbe2feac5 ("usb: musb: omap2430: Fix probe regression for missing resources")
Cc: stable <stable@kernel.org>
Signed-off-by: Wentao Liang <vulab@iscas.ac.cn>
Link: https://patch.msgid.link/20260409101104.480623-1-vulab@iscas.ac.cn
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-05-22 10:33:43 +02:00

..

cppi_dma.h

usb: musb: Remove unused function declarations

2023-08-08 10:36:43 +02:00

da8xx.c

treewide, timers: Rename from_timer() to timer_container_of()

2025-06-08 09:07:37 +02:00

jz4740.c

usb: musb: Constify struct musb_fifo_cfg

2025-02-03 16:29:53 +01:00

Kconfig

usb: musb: omap2430: enable compile testing

2025-07-25 10:50:39 +02:00

Makefile

…

mediatek.c

usb: musb: Constify struct musb_fifo_cfg

2025-02-03 16:29:53 +01:00

mpfs.c

treewide, timers: Rename from_timer() to timer_container_of()

2025-06-08 09:07:37 +02:00

musb_core.c

usb: musb: Use safer strscpy() instead of strcpy()

2026-03-11 15:39:04 +01:00

musb_core.h

ARM/musb: omap2: Remove global GPIO numbers from TUSB6010

2023-05-24 15:01:59 +02:00

musb_cppi41.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

musb_debug.h

…

musb_debugfs.c

usb: Remove redundant pm_runtime_mark_last_busy() calls

2025-11-21 15:11:53 +01:00

musb_dma.h

usb: musb: Remove unused function declarations

2023-08-08 10:36:43 +02:00

musb_dsps.c

usb: Remove redundant pm_runtime_mark_last_busy() calls

2025-11-21 15:11:53 +01:00

musb_gadget_ep0.c

drivers/usb/musb: refactor min/max with min_t/max_t

2024-11-13 15:09:51 +01:00

musb_gadget.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

musb_gadget.h

…

musb_host.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

musb_host.h

…

musb_io.h

…

musb_regs.h

…

musb_trace.c

…

musb_trace.h

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

musb_virthub.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

musbhsdma.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

omap2430.c

usb: musb: omap2430: Fix use-after-free in omap2430_probe()

2026-05-22 10:33:43 +02:00

omap2430.h

…

sunxi.c

usb: musb: Constify struct musb_fifo_cfg

2025-02-03 16:29:53 +01:00

tusb6010_omap.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

tusb6010.c

treewide, timers: Rename from_timer() to timer_container_of()

2025-06-08 09:07:37 +02:00

tusb6010.h

…

ux500_dma.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ux500.c

usb: Switch back to struct platform_driver::remove()

2024-10-04 15:13:03 +02:00