Subject usb: gadget: f_tcm: fix infoleak, sleep, and UAF in the BOT completion path
Author yhlee@isslab.korea.ac.kr
Date 2026-10-13 07:33:26 +0000 UTC
Version
Cc bigeasy@linutronix.de gregkh@linuxfoundation.org linux-kernel@vger.kernel.org linux-usb@vger.kernel.org stable@vger.kernel.org target-devel@vger.kernel.org thinh.nguyen@synopsys.com yhlee@isslab.korea.ac.kr
Patches (3)
Name Content [All]
[PATCH v7 1/3] usb: gadget: f_tcm: queue the BOT status requests with GFP_ATOMIC [Body]
[PATCH v7 2/3] usb: gadget: f_tcm: reject a short write data-out transfer [Body]
[PATCH v7 3/3] usb: gadget: f_tcm: clear the scatter list when reusing the BOT status request [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-10-13
Passed
ID (for dev) 064e89f4-f300-4195-a07c-61b1f8b050b7
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 2c3418fffa9d037b2038a6db48be63f9e2291806 [Config] passed [Log]
[KASAN] Boot test: Base 2c3418fffa9d037b2038a6db48be63f9e2291806 [Config] passed [Log]
[KASAN] Build Patched 2c3418fffa9d037b2038a6db48be63f9e2291806 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 2c3418fffa9d037b2038a6db48be63f9e2291806 [Config] [patched] passed [Log]
[KASAN] Fuzz 2c3418fffa9d037b2038a6db48be63f9e2291806 [Config] 2c3418fffa9d037b2038a6db48be63f9e2291806 [Config] [patched] passed [Log] [Artifacts]