linux-kernel - Re: [PATCH] reset: gpio: suppress bind attributes in sysfs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAMRc=MdX3Ba57bSe_+ZeE3HNLJW3TAH-WmUmdmU16br3ooEcRA@mail.gmail.com>
Date: Mon, 12 Jan 2026 11:19:32 +0100
From: Bartosz Golaszewski <brgl@...nel.org>
To: Philipp Zabel <p.zabel@...gutronix.de>
Cc: Krzysztof Kozlowski <krzk@...nel.org>, linux-kernel@...r.kernel.org, stable@...r.kernel.org, 
	Bartosz Golaszewski <bartosz.golaszewski@....qualcomm.com>
Subject: Re: [PATCH] reset: gpio: suppress bind attributes in sysfs

On Thu, Dec 4, 2025 at 10:47 AM Bartosz Golaszewski
<bartosz.golaszewski@....qualcomm.com> wrote:
>
> This is a special device that's created dynamically and is supposed to
> stay in memory forever. We also currently don't have a devlink between
> it and the actual reset consumer. Suppress sysfs bind attributes so that
> user-space can't unbind the device because - as of now - it will cause a
> use-after-free splat from any user that puts the reset control handle.
>
> Fixes: cee544a40e44 ("reset: gpio: Add GPIO-based reset controller")
> Cc: stable@...r.kernel.org
> Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@....qualcomm.com>
> ---
>  drivers/reset/reset-gpio.c | 1 +
>  1 file changed, 1 insertion(+)
>
> diff --git a/drivers/reset/reset-gpio.c b/drivers/reset/reset-gpio.c
> index e5512b3b596b..626c4c639c15 100644
> --- a/drivers/reset/reset-gpio.c
> +++ b/drivers/reset/reset-gpio.c
> @@ -111,6 +111,7 @@ static struct auxiliary_driver reset_gpio_driver = {
>         .id_table       = reset_gpio_ids,
>         .driver = {
>                 .name = "reset-gpio",
> +               .suppress_bind_attrs = true,
>         },
>  };
>  module_auxiliary_driver(reset_gpio_driver);
> --
> 2.51.0
>
>

Hi Phillipp!

This is now reviewed by Krzysztof, can you pick it up, please?

Bartosz