]> exis.tech > repos - linux.git/commit
projects / linux.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: eb3765a)
i915: don't use a vma that didn't match the context VM
authorLinus Torvalds <redacted>
Sun, 5 Apr 2026 19:42:25 +0000 (12:42 -0700)
committerLinus Torvalds <redacted>
Sun, 5 Apr 2026 19:42:25 +0000 (12:42 -0700)
commit5401b9adebc9e5f68df58226f51493ef0e6ceb4d
treea743fde152e65e85bb255b2662d83295af74c2d1tree | snapshot
parenteb3765aa711ff93664cd5ffcf0c2df02da2d9c26commit | diff
i915: don't use a vma that didn't match the context VM

In eb_lookup_vma(), the code checks that the context vm matches before
incrementing the i915 vma usage count, but for the non-matching case it
didn't clear the non-matching vma pointer, so it would then mistakenly
be returned, causing potential UaF and refcount issues.

Reported-by: Yassine Mounir <redacted>
Suggested-by: Ville Syrjälä <redacted>
Signed-off-by: Linus Torvalds <redacted>
drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c diff | blob | history
Upstream Linux kernel source code