Key Information Vulnerability Type: use-after-free Affected Component: hid-steam driver Description: - When a hid-steam device is removed, the used for intercepting access must be cleaned up. This could lead to scheduling a delayed work item to reattach the input device. Although cleanup cancels the delayed work, it completes before itself is freed, causing it to be rescheduled. This patch fixes the ordering to ensure the delayed work is properly canceled. Reporter: syzbot+0154da2d403396b2bd59@syzkaller.appspotmail.com Fix Commit: 79504249de2 ("HID: hid-steam: Move hidraw input (un)registering to work") File Changes: drivers/hid/hid-steam.c (1 line inserted, 1 line deleted)