[SRU][F][PATCH v2 2/5] PM: sleep: Fix error handling in dpm_prepare()

Ian Whitfield ian.whitfield at canonical.com
Tue Oct 15 23:30:20 UTC 2024


From: "Rafael J. Wysocki" <rafael.j.wysocki at intel.com>

Commit 2aa36604e824 ("PM: sleep: Avoid calling put_device() under
dpm_list_mtx") forgot to update the while () loop termination
condition to also break the loop if error is nonzero, which
causes the loop to become infinite if device_prepare() returns
an error for one device.

Add the missing !error check.

Fixes: 2aa36604e824 ("PM: sleep: Avoid calling put_device() under dpm_list_mtx")
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki at intel.com>
Reported-by: Thomas Hellström <thomas.hellstrom at linux.intel.com>
Reviewed-by: Thomas Hellström <thomas.hellstrom at linux.intel.com>
Reviewed-by: Ulf Hansson <ulf.hansson at linaro.org>
Cc: All applicable <stable at vger.kernel.org>
(cherry picked from commit 544e737dea5ad1a457f25dbddf68761ff25e028b)
CVE-2023-52498
Signed-off-by: Ian Whitfield <ian.whitfield at canonical.com>
---
 drivers/base/power/main.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/base/power/main.c b/drivers/base/power/main.c
index b685153ba463..ddb5de5390fe 100644
--- a/drivers/base/power/main.c
+++ b/drivers/base/power/main.c
@@ -2035,7 +2035,7 @@ int dpm_prepare(pm_message_t state)
 	device_block_probing();
 
 	mutex_lock(&dpm_list_mtx);
-	while (!list_empty(&dpm_list)) {
+	while (!list_empty(&dpm_list) && !error) {
 		struct device *dev = to_device(dpm_list.next);
 
 		get_device(dev);
-- 
2.43.0




More information about the kernel-team mailing list