kernel-5.10 软件逻辑bug The Qualcomm dwc3 runtime-PM implementation checks the xhci platform-device pointer in the wakeup-interrupt handler to determine whether the controller is in host mode and if so triggers a resume. After a role switch in OTG mode the xhci platform-device would have been freed and the next wakeup from runtime suspend would access the freed memory. Note that role switching is executed from a freezable workqueue, which guarantees that the pointer is stable during suspend. Also note that runtime PM has been broken since commit 2664deb09306 ("usb: dwc3: qcom: Honor wakeup enabled/disabled state"), which incidentally also prevents this issue from being triggered. Additional info: 社区有patch已经解决 usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup commit 451fa90150f2f7b5376919f17f88bf9c0deff2ee Reference:https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=451fa90150f2f7b5376919f17f88bf9c0deff2ee git cherry-pick -s 451fa90150f（with stable-v5.10.142 repo added）
The PR Link: https://gitee.com/anolis/cloud-kernel/pulls/1954
already fixed