summaryrefslogtreecommitdiffstats
path: root/arch
diff options
context:
space:
mode:
authorMin Li <lm0963hack@gmail.com>2023-06-03 15:43:45 +0800
committerAlex Deucher <alexander.deucher@amd.com>2023-06-09 12:41:08 -0400
commite6850f98efc70277dc0e941e905182738e7327a0 (patch)
tree8d0a5d644d8cb621edf6d5714bd6acec1c7914da /arch
parent5a03159ab7ef456ba22460e47a9d0eab2f310424 (diff)
downloadlinux-stable-e6850f98efc70277dc0e941e905182738e7327a0.tar.gz
linux-stable-e6850f98efc70277dc0e941e905182738e7327a0.tar.bz2
linux-stable-e6850f98efc70277dc0e941e905182738e7327a0.zip
drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
Userspace can race to free the gobj(robj converted from), robj should not be accessed again after drm_gem_object_put, otherwith it will result in use-after-free. Reviewed-by: Christian König <christian.koenig@amd.com> Signed-off-by: Min Li <lm0963hack@gmail.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Diffstat (limited to 'arch')
0 files changed, 0 insertions, 0 deletions