Matthew Brost 9e7f305636 drm/xe: Free job before xe_exec_queue_put ...

Free job depends on job->vm being valid, the last xe_exec_queue_put can
destroy the VM. Prevent UAF by freeing job before xe_exec_queue_put.

Fixes: dd08ebf6c3 ("drm/xe: Introduce a new DRM driver for Intel GPUs")
Signed-off-by: Matthew Brost <matthew.brost@intel.com>
Reviewed-by: Nirmoy Das <nirmoy.das@intel.com>
Reviewed-by: Jagmeet Randhawa <jagmeet.randhawa@intel.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20240820202309.1260755-1-matthew.brost@intel.com
(cherry picked from commit 32a42c93b7)
Signed-off-by: Rodrigo Vivi <rodrigo.vivi@intel.com>

2024-08-21 11:53:15 -04:00

..

drm

drm/xe: Free job before xe_exec_queue_put

2024-08-21 11:53:15 -04:00

host1x

driver core: have match() callback in struct bus_type take a const *

2024-07-03 15:16:54 +02:00

ipu-v3

Merge tag 'driver-core-6.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2024-07-25 10:42:22 -07:00

trace

…

vga

…

Makefile

…