Min Li 1af1cd7be3 drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl ...

[ Upstream commit 982b173a6c ]

Userspace can race to free the gobj(robj converted from), robj should not
be accessed again after drm_gem_object_put, otherwith it will result in
use-after-free.

Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Min Li <lm0963hack@gmail.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-06-28 11:12:39 +02:00

..

drm

drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl

2023-06-28 11:12:39 +02:00

host1x

gpu: host1x: Fix memory leak of device names

2023-05-11 23:03:12 +09:00

ipu-v3

gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id()

2023-03-10 09:33:10 +01:00

trace

…

vga

PCI/VGA: Move vgaarb to drivers/pci

2022-03-09 18:30:46 -06:00

Makefile

gpu: host1x: Add context bus

2022-06-01 11:50:42 +02:00