✓ CI.checkpatch: success for drm/xe/guc_submit: fix UAF in run_job()
Patchwork
patchwork at emeril.freedesktop.org
Fri Sep 20 13:03:24 UTC 2024
== Series Details ==
Series: drm/xe/guc_submit: fix UAF in run_job()
URL : https://patchwork.freedesktop.org/series/138921/
State : success
== Summary ==
+ KERNEL=/kernel
+ git clone https://gitlab.freedesktop.org/drm/maintainer-tools mt
Cloning into 'mt'...
warning: redirecting to https://gitlab.freedesktop.org/drm/maintainer-tools.git/
+ git -C mt rev-list -n1 origin/master
30ab6715fc09baee6cc14cb3c89ad8858688d474
+ cd /kernel
+ git config --global --add safe.directory /kernel
+ git log -n1
commit 1399505f067805ab5ca078b22782d8c574e897a5
Author: Matthew Auld <matthew.auld at intel.com>
Date: Fri Sep 20 13:38:07 2024 +0100
drm/xe/guc_submit: fix UAF in run_job()
The initial kref from dma_fence_init() should match up with whatever
signals the fence, however here we are submitting the job first to the
hw and only then grabbing the extra ref and even then we touch some
fence state before this. This might be too late if the fence is
signalled before we can grab the extra ref. Rather always grab the
refcount early before we do the submission part.
Closes: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/2811
Signed-off-by: Matthew Auld <matthew.auld at intel.com>
Fixes: dd08ebf6c352 ("drm/xe: Introduce a new DRM driver for Intel GPUs")
Cc: Matthew Brost <matthew.brost at intel.com>
Cc: <stable at vger.kernel.org> # v6.8+
+ /mt/dim checkpatch 128ccc5f71d7b9d84ce8f0651aa713ae490f4990 drm-intel
1399505f0678 drm/xe/guc_submit: fix UAF in run_job()
More information about the Intel-xe
mailing list