diff options
| author | Takashi Iwai <tiwai@suse.de> | 2026-10-07 23:56:47 +0200 |
|---|---|---|
| committer | Takashi Iwai <tiwai@suse.de> | 2026-10-08 08:49:14 +0200 |
| commit | f2c6e4f4575ff5318865c77da0153eb64809e8b8 (patch) | |
| tree | 077f7a608d4894bab2fc5ea2524e2ab14600d09f /tools/lib/python | |
| parent | f3607b6952ca9a5638eeef4f301daa7933ce24b1 (diff) | |
ASoC: codecs: hda: Stop unsol events and jack polling before codec removal
The ASoC HD-audio codec driver has the same race as the legacy HDA
codec driver unbind: hda_codec_remove() calls the codec's remove
callback that releases the driver resources, followed by
snd_hda_codec_cleanup_for_unbind(), while the unsolicited event work
and the jack polling work may still run concurrently and access the
released resources, leading to a UAF.
Apply the same fix as done for the legacy driver: call
snd_hdac_device_disable_unsol() and cancel jackpoll_work at the
beginning of hda_codec_remove(), and clear the unsol_disabled flag
again at hda_codec_probe() so that the events get delivered after the
codec is re-registered.
Assisted-by: LLM
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Link: https://patch.msgid.link/20261007215650.159871-3-tiwai@suse.de
Diffstat (limited to 'tools/lib/python')
0 files changed, 0 insertions, 0 deletions