[PATCH v2] usb: dwc3: Fix crash on fastboot exit due to incorrect memory free

[Marek Vasut]

On 5/7/26 10:45 AM, Mattijs Korpershoek wrote:
> Hi Balaji,
> 
> Thank you for the patch.
> 
> On Thu, May 07, 2026 at 10:06, Balaji Selvanathan <balaji.selvanathan at oss.qualcomm.com> wrote:
> 
>> The dwc3_free_one_event_buffer() function incorrectly called free()
>> on event buffer structures allocated with devm_kzalloc(). This
>> caused heap corruption and a synchronous abort when exiting
>> fastboot mode via "fastboot continue".
>>
>> Device-managed memory is automatically freed when the device is
>> removed, so manual deallocation causes the heap allocator to access
>> corrupted metadata.
>>
>> Fixes: 884b10e86a05 ("usb: dwc3: core: fix memory leaks in event buffer cleanup")
>>
>> Signed-off-by: Balaji Selvanathan <balaji.selvanathan at oss.qualcomm.com>
> 
> Reviewed-by: Mattijs Korpershoek <mkorpershoek at kernel.org>
> 
> Marek, I'm assuming you will pick this up.
> If you want me to take it instead, let me know.
I'll pick up V3 once the nitpick is addressed.