linux-stable/drivers
Min Li 7701bef788 drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
[ Upstream commit 982b173a6c ]

Userspace can race to free the gobj(robj converted from), robj should not
be accessed again after drm_gem_object_put, otherwith it will result in
use-after-free.

Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Min Li <lm0963hack@gmail.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-06-28 11:14:23 +02:00
..
accel
accessibility
acpi
amba
android
ata
atm
auxdisplay
base
bcma
block null_blk: Fix: memory release when memory_backed=1 2023-06-28 11:14:23 +02:00
bluetooth
bus
cdrom
char
clk
clocksource
comedi
connector
counter
cpufreq
cpuidle
crypto
cxl
dax
dca
devfreq
dio
dma
dma-buf
edac
eisa
extcon
firewire
firmware
fpga
fsi
gnss
gpio gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain() 2023-06-28 11:14:18 +02:00
gpu drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl 2023-06-28 11:14:23 +02:00
greybus
hid HID: wacom: Add error check to wacom_parse_and_register() 2023-06-28 11:14:18 +02:00
hsi
hte
hv
hwmon
hwspinlock
hwtracing
i2c i2c: designware: fix idx_write_cnt in read loop 2023-06-28 11:14:22 +02:00
i3c
idle
iio
infiniband
input Input: soc_button_array - add invalid acpi_index DMI quirk handling 2023-06-28 11:14:20 +02:00
interconnect
iommu iommu/amd: Fix possible memory leak of 'domain' 2023-06-28 11:14:17 +02:00
ipack
irqchip
isdn
leds
macintosh
mailbox
mcb
md
media media: cec: core: don't set last_initiator if tx in progress 2023-06-28 11:14:19 +02:00
memory
memstick
message
mfd
misc
mmc mmc: usdhi60rol0: fix deferred probing 2023-06-28 11:14:14 +02:00
most
mtd
mux
net Revert "net: phy: dp83867: perform soft reset and retain established link" 2023-06-28 11:14:16 +02:00
nfc nfcsim.c: Fix error checking for debugfs_create_dir 2023-06-28 11:14:19 +02:00
ntb
nubus
nvdimm
nvme nvme: improve handling of long keep alives 2023-06-28 11:14:20 +02:00
nvmem
of
opp
parisc
parport
pci
pcmcia
peci
perf
phy
pinctrl
platform platform/x86: int3472: Avoid crash in unregistering regulator gpio 2023-06-28 11:14:21 +02:00
pnp
power
powercap
pps
ps3
ptp
pwm
rapidio
ras
regulator
remoteproc
reset
rpmsg
rtc
s390 s390/cio: unregister device when the only path is gone 2023-06-28 11:14:20 +02:00
sbus
scsi
sh
siox
slimbus
soc
soundwire soundwire: qcom: add proper error paths in qcom_swrm_startup() 2023-06-28 11:14:21 +02:00
spi spi: lpspi: disable lpspi module irq in DMA mode 2023-06-28 11:14:20 +02:00
spmi
ssb
staging
target scsi: target: iscsi: Prevent login threads from racing between each other 2023-06-28 11:14:18 +02:00
tc
tee
thermal
thunderbolt
tty
ufs
uio
usb usb: gadget: udc: fix NULL dereference in remove() 2023-06-28 11:14:19 +02:00
vdpa
vfio
vhost
video
virt
virtio
vlynq
w1
watchdog
xen
zorro
Kconfig
Makefile