[PATCH fixes] soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node

Krzysztof Kozlowski krzk at kernel.org
Thu Sep 17 01:15:47 PDT 2026


On 17/09/2026 10:15, Krzysztof Kozlowski wrote:
> From: Alexey Klimov <alexey.klimov at linaro.org>
> 
> The setup_cpuhp_and_cpuidle() parses the device tree node for the
> interrupt generation block via of_parse_phandle() and decrements its
> reference count using of_node_put() immediately after fetching the resource
> address. However, later the intr_gen_node pointer is passed into
> of_syscon_register_regmap().
> 
> Fix this by declaring intr_gen_node with __free() and removing
> of_node_put().
> 
> Reported-by: Sashiko <sashiko-bot at kernel.org>
> Closes: https://sashiko.dev/#/patchset/20260513-exynos850-cpuhotplug-v4-0-54fec5f65362@linaro.org?part=3
> Fixes: 78b72897a5c8 ("soc: samsung: exynos-pmu: Enable CPU Idle for gs101")
> Cc: stable at vger.kernel.org
> Signed-off-by: Alexey Klimov <alexey.klimov at linaro.org>
> Link: https://patch.msgid.link/20260828-exynos-pmu-cpuhp-idle-fixes-v2-1-06bce6107bd6@linaro.org
> Signed-off-by: Krzysztof Kozlowski <krzk at kernel.org>
> ---
>  drivers/soc/samsung/exynos-pmu.c | 7 ++-----

Please ignore, brain fart.

Best regards,
Krzysztof



More information about the linux-arm-kernel mailing list