diff options
| author | Rob Clark <[email protected]> | 2022-12-16 23:33:55 +0000 |
|---|---|---|
| committer | Dmitry Osipenko <[email protected]> | 2023-01-09 23:17:50 +0000 |
| commit | 52531258318ed59a2dc5a43df2eaf0eb1d65438e (patch) | |
| tree | 6cc50280fa286f3ae4ebb2d577ca72d8a96653f3 /drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | |
| parent | drm: Add orientation quirk for Lenovo ideapad D330-10IGL (diff) | |
| download | kernel-52531258318ed59a2dc5a43df2eaf0eb1d65438e.tar.gz kernel-52531258318ed59a2dc5a43df2eaf0eb1d65438e.zip | |
drm/virtio: Fix GEM handle creation UAF
Userspace can guess the handle value and try to race GEM object creation
with handle close, resulting in a use-after-free if we dereference the
object after dropping the handle's reference. For that reason, dropping
the handle's reference must be done *after* we are done dereferencing
the object.
Signed-off-by: Rob Clark <[email protected]>
Reviewed-by: Chia-I Wu <[email protected]>
Fixes: 62fb7a5e1096 ("virtio-gpu: add 3d/virgl support")
Cc: [email protected]
Signed-off-by: Dmitry Osipenko <[email protected]>
Link: https://patchwork.freedesktop.org/patch/msgid/[email protected]
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c')
0 files changed, 0 insertions, 0 deletions