diff options
author | Min Li <lm0963hack@gmail.com> | 2023-06-03 15:43:45 +0800 |
---|---|---|
committer | Alex Deucher <alexander.deucher@amd.com> | 2023-06-09 12:41:08 -0400 |
commit | e6850f98efc70277dc0e941e905182738e7327a0 (patch) | |
tree | 8d0a5d644d8cb621edf6d5714bd6acec1c7914da /arch | |
parent | 5a03159ab7ef456ba22460e47a9d0eab2f310424 (diff) | |
download | linux-stable-e6850f98efc70277dc0e941e905182738e7327a0.tar.gz linux-stable-e6850f98efc70277dc0e941e905182738e7327a0.tar.bz2 linux-stable-e6850f98efc70277dc0e941e905182738e7327a0.zip |
drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
Userspace can race to free the gobj(robj converted from), robj should not
be accessed again after drm_gem_object_put, otherwith it will result in
use-after-free.
Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Min Li <lm0963hack@gmail.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Diffstat (limited to 'arch')
0 files changed, 0 insertions, 0 deletions