Files
ModemManager/src
Aleksander Morgado 166d6c5bc8 quectel: fix UAF in RDY URC handler
Defer the validity change (which triggers modem reprobe/removal) to an
idle callback in rdy_handler().

Calling mm_base_modem_set_valid(FALSE) synchronously from the URC
handler triggers the immediate destruction of the modem object while the
serial port is still iterating the unsolicited message handlers. Deferring
the operation to an idle callback and taking a reference to the modem
ensures the modem object is kept alive until parse_unsolicited() has
returned.

https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/work_items/1072

Signed-off-by: Aleksander Morgado <aleksandermj@google.com>
2026-07-10 15:00:07 +02:00
..
2025-03-11 23:15:57 +01:00
2025-03-11 23:15:57 +01:00
2025-05-08 20:24:38 -05:00
2025-05-08 20:24:38 -05:00
2023-04-10 09:21:46 +00:00
2023-01-03 13:56:25 +00:00
2025-05-08 20:24:38 -05:00
2025-05-08 20:24:38 -05:00
2025-05-08 20:24:38 -05:00
2025-05-08 20:24:38 -05:00
2025-05-08 20:24:38 -05:00