Linus Torvalds 5401b9adeb i915: don't use a vma that didn't match the context VM ...

In eb_lookup_vma(), the code checks that the context vm matches before
incrementing the i915 vma usage count, but for the non-matching case it
didn't clear the non-matching vma pointer, so it would then mistakenly
be returned, causing potential UaF and refcount issues.

Reported-by: Yassine Mounir <sosohero200@gmail.com>
Suggested-by: Ville Syrjälä <ville.syrjala@linux.intel.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2026-04-05 12:42:25 -07:00

..

drm

i915: don't use a vma that didn't match the context VM

2026-04-05 12:42:25 -07:00

host1x

…

ipu-v3

…

nova-core

…

trace

…

vga

…

Makefile

…