Merge "xhci: Fix use-after-free in xhci_free_virt_device"

drivers/usb/host/xhci.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -3659,6 +3659,7 @@ void xhci_free_dev(struct usb_hcd hcd, struct usb_device udev)
		del_timer_sync(&virt_dev->eps[i].stop_cmd_timer);
		}

		virt_dev->udev = NULL;
		spin_lock_irqsave(&xhci->lock, flags);
		/* Don't disable the slot if the host controller is dead. */
		state = readl(&xhci->op_regs->status);