[PATCH] firmware: arm_scmi: Fix requested device removal race
Sudeep Holla
sudeep.holla at kernel.org
Fri Jul 24 02:32:31 PDT 2026
On Wed, 22 Jul 2026 10:52:50 +0100, Sudeep Holla wrote:
> scmi_protocol_device_unrequest() drops scmi_requested_devices_mtx while
> notifying listeners but continues to retain the per-protocol list head.
> When two SCMI drivers for the same protocol unregister concurrently, one
> thread can remove the final request and free the list head while the other
> is running its notifier. The latter then dereferences the freed list head
> after reacquiring the mutex and can free it a second time.
>
> [...]
Applied to sudeep.holla/linux (for-next/scmi/updates), thanks!
[1/1] firmware: arm_scmi: Fix requested device removal race
https://git.kernel.org/sudeep.holla/c/2c4097e6c4ae
--
Regards,
Sudeep
More information about the linux-arm-kernel
mailing list