dan.carpenter@oracle.com 208119d552 HID: hiddev: Fix race in in hiddev_disconnect() ... commit 5c02c447eaeda29d3da121a2e17b97ccaf579b51 upstream. Syzbot reports that "hiddev" is used after it's free in hiddev_disconnect(). The hiddev_disconnect() function sets "hiddev->exist = 0;" so hiddev_release() can free it as soon as we drop the "existancelock" lock. This patch moves the mutex_unlock(&hiddev->existancelock) until after we have finished using it. Reported-by: syzbot+784ccb935f9900cc7c9e@syzkaller.appspotmail.com Fixes: 7f77897ef2b6 ("HID: hiddev: fix potential use-after-free") Suggested-by: Alan Stern <stern@rowland.harvard.edu> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Jiri Kosina <jkosina@suse.cz> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-04-07 14:04:49 +02:00
..
i2c-hid
usbhid	HID: hiddev: Fix race in in hiddev_disconnect()	2020-04-07 14:04:49 +02:00
hid-a4tech.c
hid-apple.c	HID: apple: Fix stuck function keys when using FN	2020-04-07 07:43:36 +02:00
hid-appleir.c
hid-aureal.c
hid-axff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-belkin.c
hid-betopff.c
hid-cherry.c
hid-chicony.c
hid-core.c	HID: core: fix off-by-one memset in hid_report_raw_event()	2020-04-07 14:04:45 +02:00
hid-corsair.c
hid-cp2112.c
hid-cypress.c
hid-debug.c	HID: debug: fix race condition with between rdesc_show() and device removal	2020-04-06 16:42:06 +02:00
hid-dr.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-elecom.c
hid-elo.c
hid-emsff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-ezkey.c
hid-gaff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-gembird.c
hid-generic.c
hid-gfrm.c
hid-gt683r.c
hid-gyration.c
hid-holtek-kbd.c	HID: holtek: test for sanity of intfdata	2020-04-06 20:48:02 +02:00
hid-holtek-mouse.c
hid-holtekff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-hyperv.c
hid-icade.c
hid-ids.h	HID: Add quirk for HP X1200 PIXART OEM mouse	2020-04-06 20:28:01 +02:00
hid-input.c	HID: hid-input: clear unmapped usages	2020-04-07 13:32:30 +02:00
hid-kensington.c
hid-keytouch.c
hid-kye.c
hid-lcpower.c
hid-lenovo.c
hid-lg.c	HID: logitech: Fix general protection fault caused by Logitech driver	2020-04-07 07:36:25 +02:00
hid-lg.h
hid-lg2ff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-lg3ff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-lg4ff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-lg4ff.h
hid-lgff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-logitech-dj.c
hid-logitech-hidpp.c	HID: logitech-hidpp: use RAP instead of FAP to get the protocol version	2020-04-06 18:18:31 +02:00
hid-madcatz.c
hid-magicmouse.c
hid-microsoft.c
hid-monterey.c
hid-multitouch.c
hid-ntrig.c
hid-ortek.c
hid-ovr.c
hid-penmount.c
hid-petalynx.c
hid-picolcd_backlight.c
hid-picolcd_cir.c
hid-picolcd_core.c
hid-picolcd_debugfs.c
hid-picolcd_fb.c
hid-picolcd_lcd.c
hid-picolcd_leds.c
hid-picolcd.h
hid-pl.c
hid-plantronics.c
hid-primax.c
hid-prodikeys.c	HID: prodikeys: Fix general protection fault during probe	2020-04-07 07:36:19 +02:00
hid-rmi.c
hid-roccat-arvo.c
hid-roccat-arvo.h
hid-roccat-common.c
hid-roccat-common.h
hid-roccat-isku.c
hid-roccat-isku.h
hid-roccat-kone.c
hid-roccat-kone.h
hid-roccat-koneplus.c
hid-roccat-koneplus.h
hid-roccat-konepure.c
hid-roccat-kovaplus.c
hid-roccat-kovaplus.h
hid-roccat-lua.c
hid-roccat-lua.h
hid-roccat-pyra.c
hid-roccat-pyra.h
hid-roccat-ryos.c
hid-roccat-savu.c
hid-roccat-savu.h
hid-roccat.c
hid-saitek.c
hid-samsung.c
hid-sensor-custom.c
hid-sensor-hub.c
hid-sjoy.c
hid-sony.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-speedlink.c
hid-steelseries.c
hid-sunplus.c
hid-synaptics-bt.c
hid-thingm.c
hid-tivo.c
hid-tmff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-topseed.c
hid-twinhan.c
hid-uclogic.c
hid-waltop.c
hid-wiimote-core.c
hid-wiimote-debug.c
hid-wiimote-modules.c
hid-wiimote.h
hid-xinmo.c
hid-zpff.c	HID: Fix assumption that devices have inputs	2020-04-07 09:28:20 +02:00
hid-zydacron.c
hidraw.c	HID: hidraw, uhid: Always report EPOLLOUT	2020-04-07 13:36:12 +02:00
Kconfig
Makefile
uhid.c	HID: hidraw, uhid: Always report EPOLLOUT	2020-04-07 13:36:12 +02:00
wacom_sys.c
wacom_wac.c	HID: wacom: correct misreported EKR ring values	2020-04-06 20:53:39 +02:00
wacom_wac.h
wacom.h