✓ CI.checkpatch: success for series starting with [v2,1/2] drm/xe/vm: move xa_alloc to prevent UAF
Patchwork
patchwork at emeril.freedesktop.org
Thu Sep 26 09:14:33 UTC 2024
== Series Details ==
Series: series starting with [v2,1/2] drm/xe/vm: move xa_alloc to prevent UAF
URL : https://patchwork.freedesktop.org/series/139079/
State : success
== Summary ==
+ KERNEL=/kernel
+ git clone https://gitlab.freedesktop.org/drm/maintainer-tools mt
Cloning into 'mt'...
warning: redirecting to https://gitlab.freedesktop.org/drm/maintainer-tools.git/
+ git -C mt rev-list -n1 origin/master
30ab6715fc09baee6cc14cb3c89ad8858688d474
+ cd /kernel
+ git config --global --add safe.directory /kernel
+ git log -n1
commit 891a608472b5c82e63d0c37bfb334b4439093340
Author: Matthew Auld <matthew.auld at intel.com>
Date: Wed Sep 25 08:14:28 2024 +0100
drm/xe/queue: move xa_alloc to prevent UAF
Evil user can guess the next id of the queue before the ioctl completes
and then call queue destroy ioctl to trigger UAF since create ioctl is
still referencing the same queue. Move the xa_alloc all the way to the end
to prevent this.
v2:
- Rebase
Fixes: 2149ded63079 ("drm/xe: Fix use after free when client stats are captured")
Signed-off-by: Matthew Auld <matthew.auld at intel.com>
Cc: Matthew Brost <matthew.brost at intel.com>
Reviewed-by: Nirmoy Das <nirmoy.das at intel.com>
Reviewed-by: Matthew Brost <matthew.brost at intel.com>
+ /mt/dim checkpatch 6b498b1015e38b1b7dbd1c7e3ab0a9be5d48f4da drm-intel
e6d25a32aebf drm/xe/vm: move xa_alloc to prevent UAF
891a608472b5 drm/xe/queue: move xa_alloc to prevent UAF
More information about the Intel-xe
mailing list