iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Christian König b3637835ac drm/amdgpu: fix amdgpu_cs_p1_user_fence 
commit 35588314e963938dfdcdb792c9170108399377d6 upstream.

The offset is just 32bits here so this can potentially overflow if
somebody specifies a large value. Instead reduce the size to calculate
the last possible offset.

The error handling path incorrectly drops the reference to the user
fence BO resulting in potential reference count underflow.

Signed-off-by: Christian König <christian.koenig@amd.com>
Reviewed-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-09-23 11:00:07 +02:00
..
accessibility
…
acpi
perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
2023-09-23 11:00:03 +02:00
amba
amba: bus: fix refcount leak
2023-09-23 10:59:52 +02:00
android
binder: fix memory leak in binder_init()
2023-08-16 18:19:23 +02:00
ata
ata: pata_ftide010: Add missing MODULE_DESCRIPTION
2023-09-23 11:00:00 +02:00
atm
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
auxdisplay
…
base
driver core: test_async: fix an error code
2023-09-23 10:59:50 +02:00
bcma
…
block
loop: Select I/O scheduler 'none' from inside add_disk()
2023-08-11 11:53:54 +02:00
bluetooth
Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
2023-09-23 10:59:42 +02:00
bus
bus: ti-sysc: Configure uart quirks for k3 SoC
2023-09-23 11:00:04 +02:00
cdrom
…
char
tpm_tis: Resend command to recover from data transfer errors
2023-09-23 11:00:03 +02:00
clk
clk: imx8mm: Move 1443X/1416X PLL clock structure to common place
2023-09-23 11:00:01 +02:00
clocksource
clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
2023-07-27 08:37:05 +02:00
connector
…
counter
counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
2023-05-17 11:35:31 +02:00
cpufreq
cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
2023-09-23 10:59:56 +02:00
cpuidle
cpuidle: dt: Return the correct numbers of parsed idle states
2023-01-18 11:40:53 +01:00
crypto
crypto: stm32 - fix loop iterating through scatterlist for DMA
2023-09-23 10:59:56 +02:00
dax
…
dca
…
devfreq
PM / devfreq: Fix leak in devfreq_dev_release()
2023-09-23 10:59:54 +02:00
dio
drivers: dio: fix possible memory leak in dio_init()
2023-01-18 11:41:21 +01:00
dma
dmaengine: ste_dma40: Add missing IRQ check in d40_probe
2023-09-23 10:59:53 +02:00
dma-buf
dma-buf/sw_sync: Avoid recursive lock during fence signal
2023-08-30 16:27:28 +02:00
edac
EDAC/skx: Fix overflows on the DRAM row address mapping arrays
2023-05-17 11:35:35 +02:00
eisa
…
extcon
extcon: Fix kernel doc of property capability fields to avoid warnings
2023-07-27 08:37:20 +02:00
firewire
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
firmware
firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
2023-09-23 10:59:37 +02:00
fpga
fpga: bridge: fix kernel-doc parameter description
2023-05-17 11:35:46 +02:00
fsi
fsi: master-ast-cf: Add MODULE_FIRMWARE macro
2023-09-23 10:59:37 +02:00
gnss
…
gpio
gpio: tps68470: Make tps68470_gpio_output() always set the initial value
2023-08-11 11:53:44 +02:00
gpu
drm/amdgpu: fix amdgpu_cs_p1_user_fence
2023-09-23 11:00:07 +02:00
greybus
…
hid
HID: multitouch: Correct devm device reference for hidinput input_dev name
2023-09-23 10:59:52 +02:00
hsi
HSI: omap_ssi_core: Fix error handling in ssi_init()
2023-01-18 11:41:28 +01:00
hv
Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
2023-06-28 10:18:36 +02:00
hwmon
hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
2023-08-11 11:53:52 +02:00
hwspinlock
…
hwtracing
coresight: tmc: Explicit type conversions to prevent integer overflow
2023-09-23 10:59:50 +02:00
i2c
i2c: aspeed: Reset the i2c controller when timeout occurs
2023-09-23 11:00:06 +02:00
i3c
…
ide
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
idle
…
iio
iio: addac: stx104: Fix race condition when converting analog-to-digital
2023-08-30 16:27:12 +02:00
infiniband
RDMA/siw: Correct wrong debug message
2023-09-23 10:59:52 +02:00
input
Input: adxl34x - do not hardcode interrupt trigger type
2023-07-27 08:37:13 +02:00
interconnect
interconnect: Do not skip aggregation for disabled paths
2023-08-30 16:27:27 +02:00
iommu
iommu/vt-d: Fix to flush cache of PASID directory table
2023-09-23 10:59:50 +02:00
ipack
…
irqchip
irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
2023-08-30 16:27:27 +02:00
isdn
mISDN: Update parameter type of dsp_cmx_send()
2023-08-16 18:19:23 +02:00
leds
leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
2023-08-30 16:27:14 +02:00
lightnvm
…
macintosh
macintosh: via-pmu-led: requires ATA to be set
2023-05-17 11:35:50 +02:00
mailbox
mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
2023-07-27 08:37:23 +02:00
mcb
mcb-pci: Reallocate memory region to avoid memory overlapping
2023-05-30 12:44:04 +01:00
md
md/raid1: fix error: ISO C90 forbids mixed declarations
2023-09-23 11:00:06 +02:00
media
media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
2023-09-23 11:00:05 +02:00
memory
memory: brcmstb_dpfe: fix testing array offset after use
2023-07-27 08:37:14 +02:00
memstick
memstick r592: make memstick_debug_get_tpc_name() static
2023-07-27 08:37:10 +02:00
message
scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
2023-05-30 12:44:03 +01:00
mfd
mfd: stmpe: Only disable the regulators if they are enabled
2023-07-27 08:37:22 +02:00
misc
misc: pci_endpoint_test: Re-init completion for every test
2023-07-27 08:37:37 +02:00
mmc
mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
2023-09-23 11:00:03 +02:00
mtd
mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
2023-09-23 11:00:06 +02:00
mux
…
net
wifi: mac80211_hwsim: drop short frames
2023-09-23 11:00:03 +02:00
nfc
nfcsim.c: Fix error checking for debugfs_create_dir
2023-06-28 10:18:41 +02:00
ntb
ntb: Fix calculation ntb_transport_tx_free_entry()
2023-09-23 10:59:55 +02:00
nubus
…
nvdimm
…
nvme
nvme-rdma: fix potential unbalanced freeze & unfreeze
2023-08-16 18:19:24 +02:00
nvmem
nvmem: core: fix cell removal on error
2023-02-22 12:50:28 +01:00
of
of: unittest: Fix overlay type in apply/revert check
2023-09-23 10:59:46 +02:00
opp
OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
2023-09-23 10:59:40 +02:00
oprofile
…
parisc
parisc: led: Reduce CPU overhead for disk & lan LED computation
2023-09-23 10:59:57 +02:00
parport
…
pci
Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
2023-09-23 10:59:55 +02:00
pcmcia
pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
2023-08-30 16:27:10 +02:00
perf
perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
2023-09-23 11:00:03 +02:00
phy
phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
2023-09-23 10:59:53 +02:00
pinctrl
pinctrl: amd: Don't show Invalid config param errors
2023-09-23 10:59:37 +02:00
platform
platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
2023-09-23 11:00:02 +02:00
pnp
PNP: fix name memory leak in pnp_alloc_dev()
2023-01-18 11:40:54 +01:00
power
power: supply: Fix logic checking if system is running from battery
2023-06-21 15:44:09 +02:00
powercap
powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
2023-07-27 08:37:06 +02:00
pps
…
ps3
…
ptp
ptp_qoriq: fix memory leak in probe()
2023-04-05 11:16:43 +02:00
pwm
pwm: lpc32xx: Remove handling of PWM channels
2023-09-23 10:59:58 +02:00
rapidio
rapidio: devices: fix missing put_device in mport_cdev_open
2023-01-18 11:40:59 +01:00
ras
…
regulator
regulator: core: Streamline debugfs operations
2023-07-27 08:37:07 +02:00
remoteproc
remoteproc: st: Call of_node_put() on iteration error
2023-05-17 11:36:01 +02:00
reset
…
rpmsg
rpmsg: glink: Add check for kstrdup
2023-09-23 10:59:53 +02:00
rtc
rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
2023-09-23 10:59:36 +02:00
s390
s390/zcrypt: don't leak memory if dev_set_name() fails
2023-09-23 10:59:59 +02:00
sbus
…
scsi
scsi: megaraid_sas: Fix deadlock on firmware crashdump
2023-09-23 11:00:06 +02:00
sfi
…
sh
…
siox
…
slimbus
…
soc
soc: qcom: qmi_encdec: Restrict string length in decode
2023-09-23 10:59:57 +02:00
soundwire
…
spi
spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe()
2023-09-23 10:59:41 +02:00
spmi
spmi: Add a check for remove callback when removing a SPMI driver
2023-05-17 11:35:49 +02:00
ssb
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
staging
staging: rtl8712: fix race condition
2023-09-23 10:59:37 +02:00
target
scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
2023-09-23 11:00:05 +02:00
tc
…
tee
tee: optee: fix possible memory leak in optee_register_device()
2022-12-08 11:22:57 +01:00
thermal
thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
2023-03-11 16:44:13 +01:00
thunderbolt
thunderbolt: Use const qualifier for ring_interrupt_index
2023-04-05 11:16:39 +02:00
tty
serial: cpm_uart: Avoid suspicious locking
2023-09-23 11:00:05 +02:00
uio
uio: uio_dmem_genirq: Fix deadlock between irq config and handling
2023-01-18 11:41:22 +01:00
usb
usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
2023-09-23 11:00:05 +02:00
vfio
vfio: platform: Do not pass return buffer to ACPI _RST method
2023-01-18 11:41:22 +01:00
vhost
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
video
fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
2023-09-23 10:59:57 +02:00
virt
…
virtio
virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
2023-09-23 10:59:53 +02:00
visorbus
…
vlynq
…
vme
vme: Fix error not catched in fake_init()
2023-01-18 11:41:26 +01:00
w1
w1: fix loop in w1_fini()
2023-07-27 08:37:19 +02:00
watchdog
watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
2023-09-23 10:59:58 +02:00
xen
xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
2023-05-30 12:44:10 +01:00
zorro
…
Kconfig
…
Makefile
…