Min Li 26b2ac8e8e drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl ...

[ Upstream commit 982b173a6c6d9472730c3116051977e05d17c8c5 ]

Userspace can race to free the gobj(robj converted from), robj should not
be accessed again after drm_gem_object_put, otherwith it will result in
use-after-free.

Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Min Li <lm0963hack@gmail.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-06-28 10:15:31 +02:00

..

drm

drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl

2023-06-28 10:15:31 +02:00

host1x

gpu: host1x: Don't skip assigning syncpoints to channels

2023-03-11 16:31:40 +01:00

ipu-v3

gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id()

2023-03-11 16:31:39 +01:00

vga

vga_switcheroo: Fix missing gpu_bound call at audio client registration

2018-11-13 11:09:00 -08:00

Makefile

…