tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

ipmi: ssif_bmc: cancel response timer on remove

The response timer can stay armed across device teardown. If it fires after
remove, the callback dereferences the SSIF context and the i2c client after
teardown has started.

Cancel the timer in remove so the callback cannot run after the device is
unregistered.

Signed-off-by: Jian Zhang <zhangjian.3032@bytedance.com>
Message-ID: <20260403090603.3988423-1-zhangjian.3032@bytedance.com>
Signed-off-by: Corey Minyard <corey@minyard.net>

authored by

Jian Zhang and committed by
Corey Minyard 7fc3e254 122d16da

+1
+1
drivers/char/ipmi/ssif_bmc.c
··· 843 843 { 844 844 struct ssif_bmc_ctx *ssif_bmc = i2c_get_clientdata(client); 845 845 846 + timer_delete_sync(&ssif_bmc->response_timer); 846 847 i2c_slave_unregister(client); 847 848 misc_deregister(&ssif_bmc->miscdev); 848 849 }