]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
drm/xe/migrate: prevent potential UAF
authorMatthew Auld <matthew.auld@intel.com>
Thu, 31 Jul 2025 09:38:11 +0000 (10:38 +0100)
committerMatthew Auld <matthew.auld@intel.com>
Thu, 7 Aug 2025 15:59:22 +0000 (16:59 +0100)
commit9b7ca35ed28fe5fad86e9d9c24ebd1271e4c9c3e
tree30a9d3ce7768c85035d49195e2cfad46082a757d
parent8c2d61e0e916e077fda7e7b8e67f25ffe0f361fc
drm/xe/migrate: prevent potential UAF

If we hit the error path, the previous fence (if there is one) has
already been put() prior to this, so doing a fence_wait could lead to
UAF. Tweak the flow to do to the put() until after we do the wait.

Fixes: 270172f64b11 ("drm/xe: Update xe_ttm_access_memory to use GPU for non-visible access")
Signed-off-by: Matthew Auld <matthew.auld@intel.com>
Cc: Maciej Patelczyk <maciej.patelczyk@intel.com>
Cc: Matthew Brost <matthew.brost@intel.com>
Reviewed-by: Stuart Summers <stuart.summers@intel.com>
Link: https://lore.kernel.org/r/20250731093807.207572-8-matthew.auld@intel.com
drivers/gpu/drm/xe/xe_migrate.c