[v2] interconnect: imx: fix use-after-free in imx_icc_node_init_qos()

Markus Elfring Markus.Elfring at web.de
Sun Apr 26 00:20:30 PDT 2026


…
> > use dn after the put, leading to use-after-free. Convert to automatic
> > cleanup using __free(device_node) to ensure the reference is always
> > released when dn goes out of scope.
…
> Reviewed-by: Frank Li <Frank.Li at nxp.com>

> >  drivers/interconnect/imx/imx.c | 6 ++----
…
> @@ -120,7 +120,8 @@ static int imx_icc_node_init_qos(struct icc_provider *provider,
>  	struct imx_icc_node *node_data = node->data;
>  	const struct imx_icc_node_adj_desc *adj = node_data->desc->adj;
>  	struct device *dev = provider->dev;
> -	struct device_node *dn = NULL;
> +	struct device_node *__free(device_nod) dn = of_parse_phandle(dev->of_node,
> +			adj->phandle_name, 0);

…

A typo was overlooked somehow.

Regards,
Markus



More information about the linux-arm-kernel mailing list