On Mon, 12 May 2025 23:24:19 +0800, Rong Zhang wrote:
> The current HID bpf implementation assumes no output report/request will
> go through it after hid_bpf_destroy_device() has been called. This leads
> to a bug that unplugging certain types of HID devices causes a cleaned-
> up SRCU to be accessed. The bug was previously a hidden failure until a
> recent x86 percpu change [1] made it access not-present pages.
>
> The bug will be triggered if the conditions below are met:
>
> [...]
Applied to hid/hid.git (for-6.15/upstream-fixes), thanks!
[1/1] HID: bpf: abort dispatch if device destroyed
https://git.kernel.org/hid/hid/c/578e1b96fad7
Cheers,
--
Benjamin Tissoires <bentiss@xxxxxxxxxx>
