Commit 48e487b0 authored by Stuart Hayhurst's avatar Stuart Hayhurst Committed by Jiri Kosina
Browse files

HID: corsair-void: Add missing delayed work cancel for headset status 



The cancel_delayed_work_sync() call was missed, causing a use-after-free
in corsair_void_remove().

Reported-by: default avataryan kang <kangyan91@outlook.com>
Reported-by: default avataryue sun <samsun1006219@gmail.com>
Closes: https://lore.kernel.org/all/SY8P300MB042106286A2536707D2FB736A1E42@SY8P300MB0421.AUSP300.PROD.OUTLOOK.COM/
Closes: https://lore.kernel.org/all/SY8P300MB0421872E0AE934C9616FA61EA1E42@SY8P300MB0421.AUSP300.PROD.OUTLOOK.COM/



Fixes: 6ea2a6fd ("HID: corsair-void: Add Corsair Void headset family driver")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarStuart Hayhurst <stuart.a.hayhurst@gmail.com>
Signed-off-by: default avatarJiri Kosina <jkosina@suse.com>
parent 27c02784

drivers/hid/hid-corsair-void.c

+1 −0
Original line number Diff line number Diff line
@@ -726,6 +726,7 @@ static void corsair_void_remove(struct hid_device *hid_dev) 
	if (drvdata->battery)

		power_supply_unregister(drvdata->battery);



	cancel_delayed_work_sync(&drvdata->delayed_status_work);

	cancel_delayed_work_sync(&drvdata->delayed_firmware_work);

	sysfs_remove_group(&hid_dev->dev.kobj, &corsair_void_attr_group);

}