From nobody Mon Sep 28 12:33:37 2026 Received: from mail-pj1-f49.google.com (mail-pj1-f49.google.com [209.85.216.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3AB3D345EDB for ; Fri, 21 Aug 2026 13:53:08 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.216.49 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787320389; cv=none; b=RtMl3F7UAB5WTBppybLnml8rOhTML0kYCNEwqC/IbyJ+7FNyemqg43xQK7n2sfB7EBNzEg6gIfyV77OWmez4R2XyElG6xf+46N9W9T0hacp3QLghgtFLlriwEwNfN3QxBRLfZfEAI4OhcqVRZ4txtvLlzfjlxiO+4B/Z59Iweg0= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787320389; c=relaxed/simple; bh=bcVIeuxH7OuUJ+wC/h6WnWnKDDC/AKdiFS2tnABFAgI=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=eBa1IRfpFFZwyu5Oo6JW5w/7fxGxpbvbdfrj1Ae42rj9Di60nV42vFdGN6SXkpTn1VN4LCrz23VeEjVre9EvT86+paX4FQKu6id+Xbh1T1AkG1OVw/kA/vCoJV0y9j48oq/HhO7bnQ9iU99p08vvwo6ejkFlO0ue01LE/gK3E/o= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=DzW3s3Yp; arc=none smtp.client-ip=209.85.216.49 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="DzW3s3Yp" Received: by mail-pj1-f49.google.com with SMTP id 98e67ed59e1d1-38e347638adso906678a91.0 for ; Fri, 21 Aug 2026 06:53:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787320387; x=1787925187; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=mtWi7dCSmO1v1H5hXBdpE85NppeNwpU1PcOyFZFGvPs=; b=DzW3s3YpJ2GcnI1IJ1OFN6GgP4WkW/1LR5fDL2WFDyguj3eSqDymnOzUYTaHFkAHCX LpJcGqxkosAGerwNukEKT9fOaMTyTCosH9ptphUBzS0rDIVHJx980k9jh6vpCNU/EfVa abq4AGf5anILIkGQ4mucM4VQVBSb9kWd8M4NupglVUN88xT8WqXCtiHUy0d/IwsChhfH WOwBkd9w8AXiijWrWmzdEMeYV+azpzxOjk6eUZiA+BONHYLB63Ybu9jCALBPL/JLL7bB fJp9++L2WsA/jzVVRM+eaE7u5BhktCjBhVSDJdELGncj3enH328+nVW/2SXEIz/8wKIq BfEw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787320387; x=1787925187; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=mtWi7dCSmO1v1H5hXBdpE85NppeNwpU1PcOyFZFGvPs=; b=bZBZ8MK81+iIzx2+Du1+dJ9hbZRWa7FLoWspjfszROy0Q8OnO/OYdcq4v/ncUehdJy UfYaJ9KCnZ5u7mqcRfI9Oq7NjsOaySc1umzGl+/03e4HobtHiUp+EYkFpbaYKPgK5PSr TF9WF6xCn8HRHQrhFNze5MQ5oZGoqpmTI22jM17CEitePDem4WdWV9yPn4jakWJF4Y7w 8XGi5n93tXVY4+DErnWbHM65MtDXmHV88ttQmdDyiCFTU5ZaYumCE6eEY5YuvwbWofVx /mttAZGzKL0ptX7KIm84M7+BoeBcaerpQaWLhuzkM9nicd/DUXUTkFK7u8lIx+2PrLHy md8A== X-Forwarded-Encrypted: i=1; AHgh+RpyzQSQo3/iZ6/d0gbcD8txNM1vK+4sKj8sIGxnXlfMhv1L528EPS/ALkds42i5PgRFryyZ5ohcpnwlqi8=@vger.kernel.org X-Gm-Message-State: AFuF++n51vVkengiqGtDyUsuovV+Dkpx7Wyjh3ijbaTuQuTpAwkLXdNV oRyDYj4GrSlCpAGJtLhvAs4Zx5DzM71bvVluqKLa8R114kSzKxv7gNyv X-Gm-Gg: AR+sD12RY7z6q27NJxfXi7G68Me5ecQRdm+p4v1KNmWbZ2uMw8ZpDIwqiYTX+d104S7 XSPZU2OkIQjS2fKZM0ar3wmfoPRJ/mWNCsn1csXtD3YjbgxwyklPkkzequ8++JJPSIO8sAq6QSc GhT+RKgBwnXHVkiV4PAcy7M2yS9KYoM2trm80NycmwdUje5O4Qwq63M2G03DtKQu1WJcfRWu2Ts D6XwVr3S0yfTqK+hTdhvKv+eASr4FdLG/Lbo27sN9AU5nJIbeKYPkBM7wHYt/bB7pCknNfG7Iyx GeOCTmD367PjcMugVUdwVAPf/+pZV4z1DgQLvCUMGesqgb9ieGcxiuaD3oqX68iXmEpIZsPvOhp JAHtaJbtScTn5U+Bb9rXIQ+RdWttf5AF+CA9F7jeVGXdKBFZ71tyJQEALdLI+i2BD47oF2BpNZ5 cvBTNcvw7xs+ydEseJy+qQzg82hnz0TgSrByhTNRCxC2EE3yThfQQtdnRN5HkSqAmb X-Received: by 2002:a17:90b:288a:b0:38e:b400:a860 with SMTP id 98e67ed59e1d1-395c3719f99mr12113635a91.13.1787320387327; Fri, 21 Aug 2026 06:53:07 -0700 (PDT) Received: from Default ([2409:40f4:1021:524:57f0:975b:bd1e:1e04]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-327d01ff056sm19947145eec.19.2026.08.21.06.52.57 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Aug 2026 06:53:06 -0700 (PDT) From: Jeffin Philip To: heikki.krogerus@linux.intel.com Cc: gregkh@linuxfoundation.org, mika.westerberg@linux.intel.com, linux-usb@vger.kernel.org, linux-kernel@vger.kernel.org, syzbot+520d7648a0d934061fb0@syzkaller.appspotmail.com, Jeffin Philip , syzbot+1a01783ea233350598b5@syzkaller.appspotmail.com, stable@vger.kernel.org Subject: [PATCH] usb: typec: fix null-pointer-dereference in wcove_typec_probe() Date: Fri, 21 Aug 2026 19:22:46 +0530 Message-ID: <20260821135246.17907-1-jeffinphilip14@gmail.com> X-Mailer: git-send-email 2.55.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" dev_get_drvdata() on the parent device can return NULL if we attempt to bind our device as a root device with no parent. This causes a null pointer dereference when accessing pmic->regmap later as pmic uses the parent struct. Fix this by adding a NULL check for pmic and returning -ENODEV if to_platform_device() returns NULL for pmic. Reported-by: syzbot+1a01783ea233350598b5@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=3D1a01783ea233350598b5 Fixes: d2061f9cc32d ("usb: typec: add driver for Intel Whiskey Cove PMIC US= B Type-C PHY") Cc: stable@vger.kernel.org Signed-off-by: Jeffin Philip --- drivers/usb/typec/tcpm/wcove.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/drivers/usb/typec/tcpm/wcove.c b/drivers/usb/typec/tcpm/wcove.c index 0e5a3e277c3e..80bca8edeba6 100644 --- a/drivers/usb/typec/tcpm/wcove.c +++ b/drivers/usb/typec/tcpm/wcove.c @@ -612,6 +612,10 @@ static int wcove_typec_probe(struct platform_device *p= dev) int irq; int ret; =20 + /* check if we have a parent device first */ + if (!pmic) + return -ENODEV; + wcove =3D devm_kzalloc(&pdev->dev, sizeof(*wcove), GFP_KERNEL); if (!wcove) return -ENOMEM; --=20 2.55.0