Li RongQingandWill Deacon 754f8efe45 iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() ...

dmar_latency_disable() intends to zero out only the single
latency_statistic entry for the given type, but the memset size was
computed as sizeof(*lstat) * DMAR_LATENCY_NUM, which clears the entire
array starting from &lstat[type].

When type > 0, this writes beyond the end of the allocated array,
corrupting adjacent memory.

Fix by using sizeof(*lstat) to clear only the target entry.

Fixes: 55ee5e67a5 ("iommu/vt-d: Add common code for dmar latency performance monitors")
Signed-off-by: Li RongQing <lirongqing@baidu.com>
Signed-off-by: Will Deacon <will@kernel.org>

2026-07-21 11:34:51 +00:00

..

cache.c

…

debugfs.c

…

dmar.c

iommu/vt-d: Improve IOMMU fault information

2026-06-04 09:21:50 +02:00

iommu.c

Merge branches 'apple/dart', 'arm/smmu/updates', 'arm/smmu/bindings', 'rockchip', 'verisilicon', 'riscv', 'intel/vt-d', 'amd/amd-vi' and 'core' into next

2026-06-12 14:57:23 +02:00

iommu.h

iommu/vt-d: Avoid WARNING in sva unbind path

2026-06-04 09:21:49 +02:00

irq_remapping.c

…

Kconfig

…

Makefile

…

nested.c

…

pasid.c

iommu/vt-d: Remove typo from pasid_pte_config_nested()

2026-06-04 09:21:50 +02:00

pasid.h

…

perf.c

iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()

2026-07-21 11:34:51 +00:00

perf.h

…

perfmon.c

…

perfmon.h

…

prq.c

…

svm.c

iommu/vt-d: Disallow SVA if page walk is not coherent

2026-07-21 11:27:32 +00:00

trace.c

…

trace.h

…