mirror-linux/drivers
Ryan Lin 56f7db581e HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients
During a warm reset flow, the cl->device pointer may be NULL if the
reset occurs while clients are still being enumerated. Accessing
cl->device->reference_count without a NULL check leads to a kernel panic.

This issue was identified during multi-unit warm reboot stress clycles.
Add a defensive NULL check for cl->device to ensure stability under
such intensive testing conditions.

KASAN: null-ptr-deref in range [0000000000000000-0000000000000007]
Workqueue: ish_fw_update_wq fw_reset_work_fn

Call Trace:
 ishtp_bus_remove_all_clients+0xbe/0x130 [intel_ishtp]
 ishtp_reset_handler+0x85/0x1a0 [intel_ishtp]
 fw_reset_work_fn+0x8a/0xc0 [intel_ish_ipc]

Fixes: 3703f53b99 ("HID: intel_ish-hid: ISH Transport layer")
Signed-off-by: Ryan Lin <ryan.lin@intel.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
2026-02-02 14:37:57 +01:00
..
accel
accessibility
acpi Thermal control updates for 6.19-rc1 2025-12-02 17:49:12 -08:00
amba amba: bus: Drop dev_pm_domain_detach() call 2025-11-19 18:06:50 +01:00
android Networking changes for 6.19. 2025-12-03 17:24:33 -08:00
ata ata: libata-core: Set capacity to zero for a security locked drive 2025-11-20 13:37:18 +01:00
atm atm/fore200e: Fix possible data race in fore200e_open() 2025-11-25 12:39:26 +01:00
auxdisplay
base pmdomain core: 2025-12-04 13:50:39 -08:00
bcma
block for-6.19/block-20251201 2025-12-03 19:26:18 -08:00
bluetooth Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE 2025-12-01 16:21:16 -05:00
bus
cache
cdrom
cdx
char printk changes for 6.19 2025-12-03 12:42:36 -08:00
clk
clocksource clocksource/drivers: Add Realtek system timer driver 2025-11-26 11:25:15 +01:00
comedi
connector
counter
cpufreq CPUFreq updates for 6.19 2025-11-25 17:06:04 +01:00
cpuidle pmdomain core: 2025-12-04 13:50:39 -08:00
crypto Networking changes for 6.19. 2025-12-03 17:24:33 -08:00
cxl
dax
dca
devfreq PM / devfreq: Fix typo in DFSO_DOWNDIFFERENTIAL macro name 2025-11-26 13:58:59 +09:00
dibs dibs: Remove KMSG_COMPONENT macro 2025-11-27 18:11:43 -08:00
dio
dma
dma-buf drm-next for 6.19-rc1: 2025-12-04 08:53:30 -08:00
dpll tools: ynl-gen: add regeneration comment 2025-11-25 19:20:42 -08:00
edac - imh_edac: Add a new EDAC driver for Intel Diamond Rapids and 2025-12-02 10:45:50 -08:00
eisa
extcon
firewire firewire updates for v6.19 2025-12-04 12:26:36 -08:00
firmware sound updates for 6.19-rc1 2025-12-04 10:08:40 -08:00
fpga
fsi
fwctl
gnss gnss: ubx: add support for the safeboot gpio 2025-11-20 16:44:04 +01:00
gpio gpio updates for v6.19-rc1 2025-12-04 12:33:38 -08:00
gpu drm/xe: Fix duplicated put due to merge resolution 2025-12-04 14:13:04 -08:00
greybus
hid HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients 2026-02-02 14:37:57 +01:00
hsi
hte
hv A large overhaul of the restartable sequences and CID management: 2025-12-02 08:48:53 -08:00
hwmon hwmon updates for v6.19 2025-12-04 12:19:49 -08:00
hwspinlock
hwtracing
i2c
i3c
idle
iio
infiniband Networking changes for 6.19. 2025-12-03 17:24:33 -08:00
input regulator: Updates for v6.19 2025-12-04 11:20:29 -08:00
interconnect
iommu dma-mapping fixes for Linux 6.18 2025-11-27 17:29:15 -08:00
ipack
irqchip Updates for [PCI] MSI related code: 2025-12-02 09:35:59 -08:00
isdn
leds leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM 2025-11-20 15:25:19 +00:00
macintosh
mailbox mailbox: th1520: fix clock imbalance on probe failure 2025-11-28 09:47:44 -06:00
mcb
md for-6.19/block-20251201 2025-12-03 19:26:18 -08:00
media [GIT PULL for v6.19] media updates 2025-12-04 08:15:19 -08:00
memory
memstick
message
mfd MFD for v6.19 2025-12-04 15:18:33 -08:00
misc vfs-6.19-rc1.fd_prepare.fs 2025-12-01 17:32:07 -08:00
mmc MMC core: 2025-12-04 14:10:16 -08:00
most
mtd Core MTD changes: 2025-12-04 11:07:46 -08:00
mux
net Networking changes for 6.19. 2025-12-03 17:24:33 -08:00
nfc NFC: mei_phy: fix kernel-doc warnings 2025-11-17 19:32:32 -08:00
ntb
nubus
nvdimm
nvme for-6.19/block-20251201 2025-12-03 19:26:18 -08:00
nvmem nvmem: layouts: fix nvmem_layout_bus_uevent 2025-11-24 18:08:10 +01:00
of Updates for the interrupt core and treewide cleanups: 2025-12-02 09:14:26 -08:00
opp
parisc
parport
pci Networking changes for 6.19. 2025-12-03 17:24:33 -08:00
pcmcia
peci
perf arm64 updates for 6.19: 2025-12-02 17:03:55 -08:00
phy
pinctrl pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() 2025-11-18 23:56:11 +01:00
platform gpio updates for v6.19-rc1 2025-12-04 12:33:38 -08:00
pmdomain pmdomain core: 2025-12-04 13:50:39 -08:00
pnp PNP: Fix ISAPNP to generate uevents to auto-load modules 2025-11-18 17:35:36 +01:00
power regulator: Updates for v6.19 2025-12-04 11:20:29 -08:00
powercap powercap: intel_rapl: Enable MSR-based RAPL PMU support 2025-11-21 21:47:08 +01:00
pps printk changes for 6.19 2025-12-03 12:42:36 -08:00
ps3
ptp Networking changes for 6.19. 2025-12-03 17:24:33 -08:00
pwm pwm: rzg2l-gpt: Allow checking period_tick cache value only if sibling channel is enabled 2025-11-27 09:58:07 +01:00
rapidio
ras Merge remote-tracking branches 'ras/edac-amd-atl', 'ras/edac-drivers' and 'ras/edac-misc' into edac-updates 2025-12-01 12:06:08 +01:00
regulator regulator: Updates for v6.19 2025-12-04 11:20:29 -08:00
remoteproc
resctrl arm_mpam: Add kunit tests for props_mismatch() 2025-11-19 18:34:24 +00:00
reset gpio updates for v6.19-rc1 2025-12-04 12:33:38 -08:00
rpmsg
rtc
s390 for-6.19/block-20251201 2025-12-03 19:26:18 -08:00
sbus
scsi for-6.19/block-20251201 2025-12-03 19:26:18 -08:00
sh
siox
slimbus Networking changes for 6.19. 2025-12-03 17:24:33 -08:00
soc
soundwire
spi gpio updates for v6.19-rc1 2025-12-04 12:33:38 -08:00
spmi
ssb
staging sound updates for 6.19-rc1 2025-12-04 10:08:40 -08:00
target Networking changes for 6.19. 2025-12-03 17:24:33 -08:00
tc
tee QCOMTEE fixes2 for v6.18 2025-11-21 21:27:20 +01:00
thermal Thermal control updates for 6.19-rc1 2025-12-02 17:49:12 -08:00
thunderbolt
tty printk changes for 6.19 2025-12-03 12:42:36 -08:00
ufs
uio
usb pmdomain core: 2025-12-04 13:50:39 -08:00
vdpa
vfio vfs-6.19-rc1.fd_prepare.fs 2025-12-01 17:32:07 -08:00
vhost vhost: rewind next_avail_head while discarding descriptors 2025-11-26 14:44:58 -08:00
video Backlight for v6.19 2025-12-04 15:29:27 -08:00
virt
virtio
w1
watchdog watchdog: diag288_wdt: Remove KMSG_COMPONENT macro 2025-11-26 17:34:52 +01:00
xen Networking changes for 6.19. 2025-12-03 17:24:33 -08:00
zorro
Kconfig arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate 2025-11-19 18:34:20 +00:00
Makefile arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate 2025-11-19 18:34:20 +00:00