From nobody Tue Sep 29 05:34:24 2026 Received: from mail-wm1-f44.google.com (mail-wm1-f44.google.com [209.85.128.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 822E537F8BA for ; Wed, 12 Aug 2026 07:27:59 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.44 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786519680; cv=none; b=AWu2GBDBeW+fX8a9UIZC0m1mWnu72wwDfv6cDYb3rRuUUBvZ/qDUXKblJzpssHNvMsBCDBw+6aKu9/uHseh/Ws02h9LbMHQ6nYhjGiioWBM28OXrkCOPlozeKLMb1puPkzT4Hqc/UkjSoZFaUmEvDPhd+2gcyQBmfpTTTeivjeY= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786519680; c=relaxed/simple; bh=7eEDVYVjnWBT18gV4J0Jg3Zie4uHUF1w0x+XU4MtdqI=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=oC6Z3xAkmAPxQM8jQXUBK10uCOJzQ31EjS7RTASWkX4+umiIjf/WtxiJ9R7ptYjqpVJCXGOj7RR4akJ7f1zXdyJXE6/tMlCOJc1HsNEwnW8eO+wnjI2TZoJ+CWPNdeN1jpf5zXJXKo+bL+acaoQFJu/YcI/vYoc/2vL4O+RAaCw= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=IAR38NCW; arc=none smtp.client-ip=209.85.128.44 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="IAR38NCW" Received: by mail-wm1-f44.google.com with SMTP id 5b1f17b1804b1-495757ccbc1so5493575e9.2 for ; Wed, 12 Aug 2026 00:27:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1786519678; x=1787124478; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=55VZ6EgiuuC6OKxJht4rAzty9TL3HvCY9/mfUlV1Pi8=; b=IAR38NCWARe68TTm/w18/knPhJwNr5QZnYq/JeDCnhBbH5oVLpUdC6gqRQ3drCGiGW AbT3nxP0GCeRo+0qDjzKXbnknVQWPHUAWb5O+zjVLZfVLkrl2mP0Fpc2Jzhxd+/Qp7Z7 HIfRP2kVOZ5ppN7RdwT4bgwT/Ou3wz2/bmihKbQxUh2QTGpTry/gJ/EHyntPXcBDkY3B 8A593JIRZSgH/aeGnmIJqzMmQcGQ/NnOI88eJgizhOc29IzlFjwRpnRUwuQ64e8i/G+t gxqxjo0m0oc2BxhhUvuJkOSAb7WcGrTyBFVfhEDvaDm3OJHYWpsmBAFUQPoeyuhlBriD lXDg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786519678; x=1787124478; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=55VZ6EgiuuC6OKxJht4rAzty9TL3HvCY9/mfUlV1Pi8=; b=XtfC2qKM2zyoJRXohYzbsnheBTEFEuz9zC5yVaCiEl92OlJbYIUl8UdbdMXJT9y+ce Ky967tKHuKxZ9xGkrctDP/BKdNoip6LgAQs0tw+j9NTp+KGSkgIgNa5eq2qqTNN4HN6t pI2Aj/y1mb7oag4p2GHW08r+KxI1+hy+WIgEUWc3kyRduOR4D+lOKRyfVbCDOSOnaSTJ BYdGCaZ7L1Dd9ddH0BXE/VPSY5ZMhtHqPDaWat+nA5Ym/Cv6shJsG/e5eL1/FDQXCHR7 U4vgZp92SbF25lgrcn2mGCYqovllZ8QRg6kfsIYdJea8ACquGnM2Z+lJRbzypLSvV3W6 BzxA== X-Gm-Message-State: AOJu0YwxdbmumoYm603TkU7A3W9fVdEc++FDCtAo4dktFpLl/zq+9t53 74hsw+of+b4mzp5Vw67IpOzHu0OhEG+/lQbnEsmuCtsePvP9HmGI8HVc X-Gm-Gg: AR+sD112dKOd/NTMHOHXugsUVrSEnt9uDnhU3fU52Ke1aBVSEkCuFAJb6iyqSWWh3Bg ipQt+oUFstg4P2yvx4qw++5tcbf+0uZpIMG/txXoOs0trurTif/DvV43DUH4pBl91jhW73eT0PU DBvTv8QKeNd/eiyghCanKFReMtmdQy+pnb4SUISQnoJiGBSocycPHCsWqIDtvS3cSEy9F27M2pO VgmihnIMG5NQtLx06mKzCj0mDZ2VjgY47kJbUlKh6kP8MLTeR08YHou7eUQEVzZabSa++BGTxkB kkKEQ2zFZ18okbygcNz/9ShbsyVyMlEJnGEylC+SF59WQoYQZAInaUUPXh0BLp9Jp+h/8KStyG3 agH8ADlO3HFh23SK/iYy6aKnTHEBPSLGvhzXznvtXuo92aUsgNoz7AWFW6BX63+Ta+8Lm31+aH2 BvRkiuoxsDoIJzVVfz3eIiW6FDGiwfF2vPKhSroShcbB0C9kZca3w2Hd20Akzq8VlNzGXNgN0TL ns5tOdTTv64QeRfOU24Dkwi08R1o4j5tg72TkrOivf84jvnkxanEZI= X-Received: by 2002:a05:600c:8012:b0:493:cc25:85cb with SMTP id 5b1f17b1804b1-4997c12747bmr34317525e9.8.1786519677567; Wed, 12 Aug 2026 00:27:57 -0700 (PDT) Received: from valmpani.fritz.box (cgn-195-14-219-6.nc.de. [195.14.219.6]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48150d4e285sm4849418f8f.18.2026.08.12.00.27.56 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 12 Aug 2026 00:27:57 -0700 (PDT) From: Vasileios Almpanis To: syzbot+23ad911c819b923238b7@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: i2c: core: fix debugfs UAF on adapter removal Date: Wed, 12 Aug 2026 09:27:55 +0200 Message-ID: <20260812072756.2026495-1-vasilisalmpanis@gmail.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <6a6aac38.79190830.3d7c75.0018.GAE@google.com> References: <6a6aac38.79190830.3d7c75.0018.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git= 0131b508c0e2489eac6e121135988f6eeb716f19 diff --git a/drivers/i2c/i2c-core-base.c b/drivers/i2c/i2c-core-base.c index 3ec04787a737..17cf3d225268 100644 Reported-by: syzbot+23ad911c819b923238b7@syzkaller.appspotmail.com Tested-by: syzbot+23ad911c819b923238b7@syzkaller.appspotmail.com --- a/drivers/i2c/i2c-core-base.c +++ b/drivers/i2c/i2c-core-base.c @@ -1815,6 +1815,12 @@ void i2c_del_adapter(struct i2c_adapter *adap) return; } =20 + /* + * This drains any in-flight writers, so all + * clients will be caught by i2c_deregister_clients(). + */ + device_remove_file(&adap->dev, &dev_attr_new_device); + i2c_acpi_remove_space_handler(adap); =20 i2c_deregister_clients(adap);