[PATCH v3] usb: dwc3: Fix crash on fastboot exit due to incorrect memory free
Balaji Selvanathan
balaji.selvanathan at oss.qualcomm.com
Fri May 8 05:47:14 CEST 2026
On 5/7/2026 10:55 PM, Marek Vasut wrote:
> On 5/7/26 5:20 PM, Balaji Selvanathan wrote:
>> The dwc3_free_one_event_buffer() function incorrectly called free()
>> on event buffer structures allocated with devm_kzalloc(). This
>> caused heap corruption and a synchronous abort when exiting
>> fastboot mode via "fastboot continue".
>>
>> Device-managed memory is automatically freed when the device is
>> removed, so manual deallocation causes the heap allocator to access
>> corrupted metadata.
>>
>> Fixes: 884b10e86a05 ("usb: dwc3: core: fix memory leaks in event
>> buffer cleanup")
>> Signed-off-by: Balaji Selvanathan <balaji.selvanathan at oss.qualcomm.com>
> Reviewed-by: Marek Vasut <marek.vasut+usb at mailbox.org>
>
> Did Mattijs RB got dropped ?
Hi,
Thought Mattijs will give reviewed-by after placing "Fixes:" tag in
commit footer.
Thanks
More information about the U-Boot
mailing list