mirrors/linux
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-02-17 19:30:11 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
c9db07cab766b665c8fa1184649cef452f448dc8
linux/drivers
History
Thomas Hellström c9db07cab7 drm/xe/svm: Fix a potential bo UAF 
If drm_gpusvm_migrate_to_devmem() succeeds, if a cpu access happens to the
range the bo may be freed before xe_bo_unlock(), causing a UAF.

Since the reference is transferred, use xe_svm_devmem_release() to
release the reference on drm_gpusvm_migrate_to_devmem() failure,
and hold a local reference to protect the UAF.

Fixes: 2f118c9491 ("drm/xe: Add SVM VRAM migration")
Signed-off-by: Thomas Hellström <thomas.hellstrom@linux.intel.com>
Reviewed-by: Matthew Brost <matthew.brost@intel.com>
Link: https://lore.kernel.org/r/20250326080551.40201-3-thomas.hellstrom@linux.intel.com
2025-03-27 11:49:58 +01:00
..
accel
accel/amdxdna: Check interrupt register before mailbox_rx_worker exits
2025-02-27 08:41:46 -06:00
accessibility
…
acpi
ACPI: platform_profile: Add support for hidden choices
2025-03-04 20:45:34 +01:00
amba
…
android
binderfs: fix use-after-free in binder_devices
2025-02-20 15:20:11 +01:00
ata
Merge tag 'ata-6.14-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux
2025-03-01 08:59:29 -08:00
atm
…
auxdisplay
Merge tag 'auxdisplay-v6.14-1' of git://git.kernel.org/pub/scm/linux/kernel/git/andy/linux-auxdisplay
2025-01-24 08:03:52 -08:00
base
Backmerge tag 'v6.14-rc6' into drm-next
2025-03-12 09:43:12 +10:00
bcma
…
block
Merge tag 'block-6.14-20250306' of git://git.kernel.dk/linux
2025-03-07 11:12:33 -10:00
bluetooth
bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
2025-02-27 16:50:05 -05:00
bus
Backmerge tag 'v6.14-rc6' into drm-next
2025-03-12 09:43:12 +10:00
cache
…
cdrom
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
cdx
cdx: Fix possible UAF error in driver_override_show()
2025-02-20 15:19:07 +01:00
char
Merge tag 'char-misc-6.14-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2025-03-09 09:07:54 -10:00
clk
Merge tag 'mm-stable-2025-01-26-14-59' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-01-26 18:36:23 -08:00
clocksource
irqchip/jcore-aic, clocksource/drivers/jcore: Fix jcore-pit interrupt request
2025-02-17 23:27:49 +01:00
comedi
…
connector
…
counter
…
cpufreq
Merge tag 'amd-pstate-v6.14-2025-02-06' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/superm1/linux
2025-02-06 20:39:43 +01:00
cpuidle
Merge tag 'pm-6.14-rc1-2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2025-01-30 15:10:34 -08:00
crypto
crypto: ccp: Add external API interface for PSP module initialization
2025-02-14 18:39:19 -05:00
cxl
Merge tag 'cxl-for-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/cxl/cxl
2025-01-29 11:23:22 -08:00
dax
…
dca
…
devfreq
…
dio
…
dma
Merge tag 'dmaengine-fix-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine
2025-03-02 10:08:45 -08:00
dma-buf
Merge drm/drm-next into drm-misc-next
2025-02-06 13:47:32 +01:00
dpll
…
edac
EDAC/qcom: Correct interrupt enable register configuration
2025-02-14 20:36:11 +01:00
eisa
…
extcon
…
firewire
Merge tag 'driver-core-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core
2025-01-28 12:25:12 -08:00
firmware
Merge tag 'efi-fixes-for-v6.14-2' of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi
2025-02-28 08:47:21 -08:00
fpga
…
fsi
…
gnss
…
gpio
gpio: rcar: Fix missing of_node_put() call
2025-03-06 15:51:27 +01:00
gpu
drm/xe/svm: Fix a potential bo UAF
2025-03-27 11:49:58 +01:00
greybus
…
hid
Merge tag 'hid-for-linus-2025030501' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid
2025-03-05 07:46:59 -10:00
hsi
…
hte
…
hv
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
hwmon
hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
2025-03-03 06:04:34 -08:00
hwspinlock
…
hwtracing
intel_th: pci: Add Panther Lake-P/U support
2025-02-20 09:35:57 +01:00
i2c
i2c: amd-asf: Fix EOI register write to enable successive interrupts
2025-02-26 23:28:41 +01:00
i3c
Merge tag 'i3c/for-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/i3c/linux
2025-01-24 15:48:01 -08:00
idle
intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
2025-02-28 22:04:26 +01:00
iio
iio: filter: admv8818: Force initialization of SDO
2025-02-08 12:46:32 +00:00
infiniband
RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
2025-02-23 06:57:56 -05:00
input
Merge tag 'platform-drivers-x86-v6.14-1' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86
2025-01-24 07:18:39 -08:00
interconnect
Merge tag 'icc-6.14-rc1' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/djakov/icc into char-misc-next
2025-01-16 14:01:40 +01:00
iommu
iommu/vt-d: Fix suspicious RCU usage
2025-02-28 12:19:01 +01:00
ipack
…
irqchip
irqchip/qcom-pdc: Workaround hardware register bug on X1E80100
2025-02-21 09:47:06 +01:00
isdn
…
leds
Merge tag 'driver-core-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core
2025-01-28 12:25:12 -08:00
macintosh
Merge tag 'mm-stable-2025-01-26-14-59' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-01-26 18:36:23 -08:00
mailbox
mailbox: th1520: Fix memory corruption due to incorrect array size
2025-01-18 16:20:55 -06:00
mcb
…
md
Merge tag 'for-6.14/dm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm
2025-02-24 16:29:48 -08:00
media
media: cec: move driver for TDA9950 from drm/i2c
2025-02-13 00:17:42 +02:00
memory
Merge tag 'spi-mem-dtr-2' into nand/next
2025-01-15 19:07:39 +01:00
memstick
Merge tag 'char-misc-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2025-01-27 16:51:51 -08:00
message
…
mfd
mfd: syscon: Restore device_node_to_regmap() for non-syscon nodes
2025-02-11 14:53:39 +00:00
misc
Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
2025-02-27 12:24:53 -08:00
mmc
mmc: mtk-sd: Fix register settings for hs400(es) mode
2025-02-03 13:34:50 +01:00
most
…
mtd
Merge tag 'spi-nor/fixes-for-6.14-rc4' of https://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux into mtd/fixes
2025-02-19 14:38:47 +01:00
mux
…
net
mctp i3c: handle NULL header address
2025-03-06 10:33:07 +01:00
nfc
nfc: mrvl: Don't use "proxy" headers
2025-01-18 17:10:05 -08:00
ntb
PCI: Remove devres from pci_intx()
2025-01-18 14:38:49 -06:00
nubus
…
nvdimm
…
nvme
nvme-tcp: fix signedness bug in nvme_tcp_init_connection()
2025-03-05 10:37:01 -08:00
nvmem
…
of
Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
2025-02-26 13:39:28 -06:00
opp
Merge tag 'driver-core-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core
2025-01-28 12:25:12 -08:00
parisc
…
parport
…
pci
Merge tag 'pci-v6.14-fixes-3' of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci
2025-02-14 16:49:07 -08:00
pcmcia
…
peci
…
perf
treewide: const qualify ctl_tables where applicable
2025-01-28 13:48:37 +01:00
phy
phy: tegra: xusb: reset VBUS & ID OVERRIDE
2025-02-14 18:03:05 +05:30
pinctrl
pinctrl: pinconf-generic: Print unsigned value if a format is registered
2025-02-06 10:13:15 +01:00
platform
Merge tag 'acpi-6.14-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2025-03-07 12:17:42 -10:00
pmdomain
pmdomain: airoha: Fix compilation error with Clang-20 and Thumb2 mode
2025-01-21 10:45:24 +01:00
pnp
…
power
power: supply: axp20x_battery: Fix fault handling for AXP717
2025-02-03 12:41:18 +01:00
powercap
Merge branch 'pm-powercap'
2025-02-07 12:43:58 +01:00
pps
…
ps3
…
ptp
ptp: vmclock: Remove goto-based cleanup logic
2025-02-11 10:20:52 +01:00
pwm
Merge tag 'driver-core-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core
2025-01-28 12:25:12 -08:00
rapidio
rapidio: add check for rio_add_net() in rio_scan_alloc_net()
2025-03-05 21:36:19 -08:00
ras
…
regulator
regulator: core: let dt properties override driver init_data
2025-02-11 16:29:01 +00:00
remoteproc
remoteproc: st: Use syscon_regmap_lookup_by_phandle_args
2025-01-15 10:04:27 -07:00
reset
Merge tag 'soc-drivers-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc
2025-01-24 14:56:59 -08:00
rpmsg
…
rtc
Merge tag 'rtc-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux
2025-01-30 17:50:02 -08:00
s390
Merge tag 'net-6.14-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-02-20 10:19:54 -08:00
sbus
…
scsi
scsi: core: Clear driver private data when retrying request
2025-02-20 21:20:58 -05:00
sh
…
siox
…
slimbus
slimbus: messaging: Free transaction ID in delayed interrupt scenario
2025-02-20 15:19:51 +01:00
soc
soc: loongson: loongson2_guts: Add check for devm_kstrdup()
2025-02-20 22:29:05 +01:00
soundwire
Merge tag 'soundwire-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/soundwire
2025-01-29 14:38:19 -08:00
spi
spi: sn-f-ospi: Fix division by zero
2025-02-06 11:33:51 +00:00
spmi
spmi: hisi-spmi-controller: Drop duplicated OF node assignment in spmi_controller_probe()
2025-01-17 12:58:49 +01:00
ssb
…
staging
fbtft: Remove access to page->index
2025-03-05 08:38:21 +01:00
target
Merge branch '6.14/scsi-queue' into 6.14/scsi-fixes
2025-02-03 16:28:51 -05:00
tc
…
tee
tee: optee: Fix supplicant wait loop
2025-02-14 15:17:34 +01:00
thermal
thermal: gov_power_allocator: Update total_weight on bind and cdev updates
2025-02-25 12:30:45 +01:00
thunderbolt
Merge tag 'driver-core-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core
2025-01-28 12:25:12 -08:00
tty
Merge tag 'tty-6.14-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty
2025-02-16 12:50:44 -08:00
ufs
scsi: ufs: core: bsg: Fix crash when arpmb command fails
2025-02-20 22:18:24 -05:00
uio
Merge tag 'char-misc-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2025-01-27 16:51:51 -08:00
usb
usb: typec: ucsi: Fix NULL pointer access
2025-03-06 16:55:46 +01:00
vdpa
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2025-01-27 15:26:06 -08:00
vfio
Merge tag 'vfio-v6.14-rc1' of https://github.com/awilliam/linux-vfio
2025-01-28 14:16:46 -08:00
vhost
vhost: return task creation error instead of NULL
2025-03-01 02:52:52 -05:00
video
gpu: nova-core: add initial driver stub
2025-03-09 19:24:27 +01:00
virt
Merge tag 'char-misc-6.14-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2025-03-09 09:07:54 -10:00
virtio
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2025-01-27 15:26:06 -08:00
w1
…
watchdog
Merge tag 'linux-watchdog-6.14-rc1' of git://www.linux-watchdog.org/linux-watchdog
2025-01-25 16:19:10 -08:00
xen
Merge tag 'for-linus-6.14-rc3-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip
2025-02-14 08:15:17 -08:00
zorro
…
Kconfig
…
Makefile
…