[PATCH v3] usb: dwc3: Fix crash on fastboot exit due to incorrect memory free
Marek Vasut
marek.vasut at mailbox.org
Thu May 7 19:25:56 CEST 2026
On 5/7/26 5:20 PM, Balaji Selvanathan wrote:
> The dwc3_free_one_event_buffer() function incorrectly called free()
> on event buffer structures allocated with devm_kzalloc(). This
> caused heap corruption and a synchronous abort when exiting
> fastboot mode via "fastboot continue".
>
> Device-managed memory is automatically freed when the device is
> removed, so manual deallocation causes the heap allocator to access
> corrupted metadata.
>
> Fixes: 884b10e86a05 ("usb: dwc3: core: fix memory leaks in event buffer cleanup")
> Signed-off-by: Balaji Selvanathan <balaji.selvanathan at oss.qualcomm.com>
Reviewed-by: Marek Vasut <marek.vasut+usb at mailbox.org>
Did Mattijs RB got dropped ?
More information about the U-Boot
mailing list