In the Linux kernel, the following vulnerability has been resolved:
platform/chrome: crosecishtp: Fix UAF after unbinding driver
After unbinding the driver, another kthread crosecconsolelogwork is still accessing the device, resulting an UAF and crash.
The driver doesn't unregister the EC device in .remove() which should shutdown sub-devices synchronously. Fix it.