tree 104418260e4f08b1861176a35727248b0c8f91fa
parent 46c572b64e12be7fe0feba2040de962cc6ed7ebc
author Zijun Hu <quic_zijuhu@quicinc.com> 1722069241 +0800
committer Michael Kochera <kochera@google.com> 1737670575 -0800

driver core: bus: Fix double free in driver API bus_register()

commit bfa54a793ba77ef696755b66f3ac4ed00c7d1248 upstream.

For bus_register(), any error which happens after kset_register() will
cause that @priv are freed twice, fixed by setting @priv with NULL after
the first free.

BUG=b/375367686
TEST=presubmit
RELEASE_NOTE=Fixed CVE-2024-50055 in the Linux kernel.

cos-patch: security-high
Change-Id: I81be74d101010c7044229b471109df145788ba45
Signed-off-by: Zijun Hu <quic_zijuhu@quicinc.com>
Link: https://lore.kernel.org/r/20240727-bus_register_fix-v1-1-fed8dd0dba7a@quicinc.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
[ Brennan : Backport requires bus->p = NULL instead of priv = NULL ]
Signed-off-by: Brennan Lamoreaux <brennan.lamoreaux@broadcom.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kernel CVE Triage Automation <cloud-image-kernel-cve-triage-automation@prod.google.com>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/90696
Reviewed-by: Michael Kochera <kochera@google.com>
Reviewed-by: Arnav Kansal <rnv@google.com>
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>