[PATCH v7 0/3] drm/i915: Fix VMA UAF on destroy against deactivate race

Andi Shyti andi.shyti at linux.intel.com
Tue Mar 26 11:16:54 UTC 2024


Hi Janusz,

On Tue, Mar 05, 2024 at 03:35:05PM +0100, Janusz Krzysztofik wrote:
> Object debugging tools were sporadically reporting illegal attempts to
> free a still active i915 VMA object when parking a GT believed to be idle.
> 
> [161.359441] ODEBUG: free active (active state 0) object: ffff88811643b958 object type: i915_active hint: __i915_vma_active+0x0/0x50 [i915]
> [161.360082] WARNING: CPU: 5 PID: 276 at lib/debugobjects.c:514 debug_print_object+0x80/0xb0

...

pushded to drm-intel-gt-next.

Thanks,
Andi


More information about the Intel-gfx mailing list