Merge "xhci: Fix use-after-free in xhci_free_virt_device" (0fe2105a) · Commits · e / devices / android_kernel_fairphone_FP3

drivers/usb/host/xhci.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -3661,6 +3661,7 @@ void xhci_free_dev(struct usb_hcd hcd, struct usb_device udev)
		del_timer_sync(&virt_dev->eps[i].stop_cmd_timer);
		}

		virt_dev->udev = NULL;
		spin_lock_irqsave(&xhci->lock, flags);
		/* Don't disable the slot if the host controller is dead. */
		state = readl(&xhci->op_regs->status);