diff options
| author | Matthew Auld <matthew.auld@intel.com> | 2024-09-25 08:14:27 +0100 |
|---|---|---|
| committer | Matthew Auld <matthew.auld@intel.com> | 2024-09-27 09:28:58 +0100 |
| commit | dcfd3971327f3ee92765154baebbaece833d3ca9 (patch) | |
| tree | ba9f3374bea95dae78a17aa9c05b2a35c4952492 /tools/perf/scripts/python | |
| parent | 8ec5a4e5ce97d6ee9f5eb5b4ce4cfc831976fdec (diff) | |
drm/xe/vm: move xa_alloc to prevent UAF
Evil user can guess the next id of the vm before the ioctl completes and
then call vm destroy ioctl to trigger UAF since create ioctl is still
referencing the same vm. Move the xa_alloc all the way to the end to
prevent this.
v2:
- Rebase
Fixes: dd08ebf6c352 ("drm/xe: Introduce a new DRM driver for Intel GPUs")
Signed-off-by: Matthew Auld <matthew.auld@intel.com>
Cc: Matthew Brost <matthew.brost@intel.com>
Cc: <stable@vger.kernel.org> # v6.8+
Reviewed-by: Nirmoy Das <nirmoy.das@intel.com>
Reviewed-by: Matthew Brost <matthew.brost@intel.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20240925071426.144015-3-matthew.auld@intel.com
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions