From nobody Sun Feb 8 06:22:32 2026 Received: from mail-pf1-f170.google.com (mail-pf1-f170.google.com [209.85.210.170]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C6F3D500964 for ; Sat, 17 Jan 2026 05:54:40 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.170 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768629281; cv=none; b=B9lYppASQmMYJt5TJkRwNBrU+T4FS8ECP+s8VaWZzpslcga4qRQ49CF8HqYK++F+QpodmKusGZ6IHYw7EjJ782Bua3sGBlHr9xQFKE55dqNi9mAggsHTV4sLxJ5QbyVi1QPr3DW6V5UHeSLNO1Xcf+N797Efp2Ar49I4q7TPlLQ= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1768629281; c=relaxed/simple; bh=X28oz4Hqu8C9OrNAoigAJocOtIUCqP9c5jKWoshxS8A=; h=From:To:Cc:Subject:Date:Message-Id:MIME-Version; b=UDSZnxSJipDIuXzW1MB0jzteb1gYfJ2X8oIn+/RlZdqZFv7Fhddxtltq6Uk6oEUnNAkJ6mOwrmoNGkP3Q3nk1GSWak8cAVPZTHE6qh0Ed6Zd4YOrfS9ERh34us+Cv8mQpXn4NwSRmygqChqmTAR6vgk9z3GUyA+VHqZ/NZA5P8E= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=LFyQOzPo; arc=none smtp.client-ip=209.85.210.170 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="LFyQOzPo" Received: by mail-pf1-f170.google.com with SMTP id d2e1a72fcca58-81f47610542so1414085b3a.0 for ; Fri, 16 Jan 2026 21:54:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1768629280; x=1769234080; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=/3Y2YH3nM767IcqTvERX11GvwkdtC120hdoDxqBZKew=; b=LFyQOzPorXJunsHZVvd2JKEQoxTrPZMc2PXAORIkJIDwazBca9x1UeW614FnKUk46W 5sqXe+fvZHnWnQAiQXX7k0Ybia7YVROUnPSkmFc1ALQM3ELPbY8RAeJLwJESRcneJpbz Bv3KTE4w4NAlYbam0PBu11ncJtSyoxKSdnN31DbNopNArBFKoWOrMOYoNLAgSQG3FkAm 2sNFTA234aqrLLZqpvAu4GfRRwUDI3/RSZcl+c28v/BxzRa+BOhaUQ7DK1liqlU3/ivV qzZB+h6/abccnfQVku07xcqOhIoS2AOdebWkn1ubF9oCUeeK4pr/c0+yDSY+iufZcasw GzJg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768629280; x=1769234080; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=/3Y2YH3nM767IcqTvERX11GvwkdtC120hdoDxqBZKew=; b=j/0k92BqBGPqHgD2oYbyKUgx2LSn58IB6cSOVm7kh5kkmZjjqqL/Zhz7Xh8diMJagb BdpGjkjJYt7rjmhxQGfQFGR1bhlRiEYPk927opMLKC9x7HNRZcyfL1wOgmsu0cSkJt1k HSwnrd8K4ThSojKD2fXTprNIfVBrazbdQ6onmQS6i4nnX9Pdnpg+qFWF7v72XRLsCQJH UcUcvNc/9kb5thgA45Oo5L2Gql5s/yzQPZuy8ppqGYWgxoob/Uy7vNlofMaYZWBf1wta sVi3z37VsIprI99sduQBRUfLa3YnM7jY0pvu1MCyQBOOf92LK3APD9NVY+xXvuZqkDdT vAzg== X-Forwarded-Encrypted: i=1; AJvYcCWXjAurRlPwFxNI7B2X2tjQg0E4EF+ERDPDYOefYqQWRBLYeSNpMZxeUH/7zg8N/hyPa+34XP69vYlX7GE=@vger.kernel.org X-Gm-Message-State: AOJu0Yy/605lHV345dpJ4bMfa/HkD86yEGFuYq/oEQl8KQSfArXee4FS EepWZ3Lx2A44O3qZFJUzchbjW1Sd4eze1Lxhc5AlY5dnyUL+Acr5bZeOspErZg== X-Gm-Gg: AY/fxX7pP/uinx7wfUm3A6dKKG+vM8dhVAoRFb0w9Qn3n96UMvo0h9AIuACXzqwrrPw Xi60UiLk1HZWCk/UDN+ArgCHeQi7q3GgJDPysrbVM3GxFzzusnZmtyfZDsVr29t/8rTLhW0iygy KEORRAhqORi1PcahHfKEEeEg6JMXGVQE9fP9rTBaag92yJfY9YSG3DJmsQjzpQYON+yrkU5R1H9 1iVs+xKvcuMYXh0ysxpnMnjQS5Iibb6Bky8VzQ5dzAFAa2Xdi/PniHELelyKaG/tAri5A+AqT2T Ld7DcBExJMyr5hiTxs3ddQG1gGICCPLm8amQXA94pFF1GlREvxrQ269vSd4MiaqlP5OYe/XfiB0 +f+RYWfrioWZYrVZQu6Qzq9K41zvBrzS4xW+FVLwhMPbhhiDmYfjjENKLo5vTFW41W771Rcde4X LwfX8dzaQ28IloO1Lp8E/4fqyWoGeBgR8FQZSKr5Si6SqdGLO/iFfYqNgOp7MLF+AQ4HGzNeSeP lqnvdQjch9GQXheAU18sriLh/5t2obDMIDVWpDEKfJx86U= X-Received: by 2002:a05:6a20:5499:b0:38d:f0f3:b96f with SMTP id adf61e73a8af0-38dfe7b8b24mr5870030637.64.1768629280156; Fri, 16 Jan 2026 21:54:40 -0800 (PST) Received: from c8971f1abf06.ap-southeast-2.compute.internal (ec2-54-252-206-51.ap-southeast-2.compute.amazonaws.com. [54.252.206.51]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-c5edf32d175sm3413091a12.23.2026.01.16.21.54.36 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 16 Jan 2026 21:54:39 -0800 (PST) From: Weigang He To: tony@atomide.com, aaro.koskinen@iki.fi, andreas@kemnade.info, khilman@baylibre.com, rogerq@kernel.org Cc: linux-omap@vger.kernel.org, linux-kernel@vger.kernel.org, Weigang He , stable@vger.kernel.org Subject: [PATCH] bus: ti-sysc: fix reference count leak in sysc_init_stdout_path() Date: Sat, 17 Jan 2026 05:54:33 +0000 Message-Id: <20260117055433.416027-1-geoffreyhe2@gmail.com> X-Mailer: git-send-email 2.34.1 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" of_find_node_by_path() returns a device_node with refcount incremented. When of_get_property() is called to get the stdout-path property, the reference to the "/chosen" node stored in np is either leaked if the property lookup fails, or overwritten when np is reassigned to the uart node path without releasing the "/chosen" reference first. Add of_node_put(np) after of_get_property() to properly release the "/chosen" node reference before either going to the error path or acquiring a new reference for the uart path. Fixes: 3bb37c8e6e6a ("bus: ti-sysc: Handle stdout-path for debug console") Cc: stable@vger.kernel.org Signed-off-by: Weigang He --- drivers/bus/ti-sysc.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/bus/ti-sysc.c b/drivers/bus/ti-sysc.c index 610354ce7f8f0..091cdad2f2cc6 100644 --- a/drivers/bus/ti-sysc.c +++ b/drivers/bus/ti-sysc.c @@ -696,6 +696,7 @@ static void sysc_init_stdout_path(struct sysc *ddata) goto err; =20 uart =3D of_get_property(np, "stdout-path", NULL); + of_node_put(np); if (!uart) goto err; =20 --=20 2.34.1