In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
Input: sur40 – fix input device registration ordering<\/p>\n
In sur40_probe(), input_register_device() was previously called early before
\nthe V4L2 video device and vb2_queue components were fully initialized. If
\nuserspace opened the input device immediately upon registration, sur40_open()
\nwould trigger and start the sur40_poll() worker thread. This worker thread
\ninvokes sur40_process_video() and accesses the uninitialized vb2_queue
\nstructure, leading to a data race and potential system crash.<\/p>\n
Furthermore, if V4L2 or video registration failed after input_register_device()
\nsucceeded, the error path fell through to calling input_free_device() on a
\nsuccessfully registered device instead of input_unregister_device(), corrupting
\ninput core state.<\/p>\n
Move input_register_device() to the very end of sur40_probe(). This ensures
\nthe V4L2 and video queue structures are fully initialized before polling can
\nstart, and naturally resolves the error path bug since input_free_device()
\nis now only called when input registration has not yet occurred.<\/p>\n
To maintain strict LIFO (Last-In, First-Out) teardown ordering, also move
\ninput_unregister_device() to the very beginning of sur40_disconnect(). This
\nguarantees that the input polling worker thread is stopped before V4L2
\nvideo components or control handlers are unregistered.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
Input: sur40 – fix input device registration ordering<\/p>\n
In sur40_probe(), input_register_device() was previously called early before<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-11964","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/11964","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}