[PATCH 19/58] mtd: rawnand: orion: retain open-handle state on removal
sashiko-bot at kernel.org
sashiko-bot at kernel.org
Sat Nov 7 12:29:20 PST 2026
Thank you for your contribution! Sashiko AI review found 1 potential
issue to consider:
- [Low] mtd: rawnand: orion: missing Fixes trailer for removal UAF fix
--
commit 9465d514f949c22e40663ef5664153c0883e1d59
Author: James Hilliard <james.hilliard1 at gmail.com>
> mtd: rawnand: orion: retain open-handle state on removal
>
> Keep chip metadata and controller storage alive until the final MTD
> reference is released. Unregister and disconnect each published chip
> before releasing the resources used by its hardware operations.
>
> Retain the embedded chip and its copied name through the shared
> allocation.
>
> Signed-off-by: James Hilliard <james.hilliard1 at gmail.com>
[Severity: Low]
This fixes a use-after-free when the device is removed while MTD handles
remain open, which has been present since the driver was introduced.
Should it include a Fixes tag?
Fixes: 2a1dba2931dc ("[MTD] [NAND] Marvell Orion device bus NAND controller")
--
Sashiko AI review · https://sashiko.dev/#/patchset/20261107-submit-rawnand-retained-handle-lifetime-v1-v1-0-0181ef0cc4c8@gmail.com?part=19
More information about the linux-mtd
mailing list