Files
linux/drivers/usb/typec
Heikki Krogerus b028c1cefc usb: typec: ucsi: Fix command cancellation
commit c4a8bfabef upstream.

The Cancel command was passed to the write callback as the
offset instead of as the actual command which caused NULL
pointer dereference.

Reported-by: Stephan Bolten <stephan.bolten@gmx.net>
Closes: https://bugzilla.kernel.org/show_bug.cgi?id=217517
Fixes: 094902bc6a ("usb: typec: ucsi: Always cancel the command if PPM reports BUSY condition")
Cc: stable@vger.kernel.org
Signed-off-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Message-ID: <20230606115802.79339-1-heikki.krogerus@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-06-21 16:02:12 +02:00
..
2023-01-17 17:23:47 +01:00
2022-07-14 16:24:05 +02:00
2022-07-14 16:24:05 +02:00
2022-04-26 13:47:13 +02:00
2022-08-16 12:46:26 +02:00