linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-02-16 02:07:55 -05:00

Files

Ian Forbes dfe1323ab3 drm/vmwgfx: Fix Use-after-free in validation

Nodes stored in the validation duplicates hashtable come from an arena
allocator that is cleared at the end of vmw_execbuf_process. All nodes
are expected to be cleared in vmw_validation_drop_ht but this node escaped
because its resource was destroyed prematurely.

Fixes: 64ad2abfe9 ("drm/vmwgfx: Adapt validation code for reference-free lookups")
Reported-by: Kuzey Arda Bulut <kuzeyardabulut@gmail.com>
Signed-off-by: Ian Forbes <ian.forbes@broadcom.com>
Reviewed-by: Zack Rusin <zack.rusin@broadcom.com>
Signed-off-by: Zack Rusin <zack.rusin@broadcom.com>
Link: https://lore.kernel.org/r/20250926195427.1405237-1-ian.forbes@broadcom.com

2025-10-06 11:57:38 -04:00

drm

drm/vmwgfx: Fix Use-after-free in validation

2025-10-06 11:57:38 -04:00

host1x

gpu: host1x: Use for_each_available_child_of_node_scoped()

2025-05-07 18:09:30 +02:00

ipu-v3

gpu: ipu-v3: Switch to irq_find_mapping()

2025-05-16 21:06:12 +02:00

nova-core

Merge tag 'rust-6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/ojeda/linux