CVE-2023-54100

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedi: Fix use after free bug in qedi_remove()

In qedi_probe() we call _qediprobe() which initializes &qedi->recoverywork with qedirecoveryhandler() and &qedi->boarddisablework with qediboarddisablework().

When qedischedulerecoveryhandler() is called, scheduledelayed_work() will finally start the work.

In qedi_remove(), which is called to remove the driver, the following sequence may be observed:

Fix this by finishing the work before cleanup in qedi_remove().

CPU0 CPU1

                 |qedi_recovery_handler

qedi_remove | _qediremove | iscsihostfree | scsihostput | //free shost | |iscsihostforeachsession |//use qedi->shost

Cancel recoverywork and boarddisable_work in _qediremove().