]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
drm/amdgpu/userq: defer queue publication until create completes
authorSunil Khatri <sunil.khatri@amd.com>
Tue, 3 Mar 2026 19:08:06 +0000 (00:38 +0530)
committerAlex Deucher <alexander.deucher@amd.com>
Fri, 6 Mar 2026 21:34:06 +0000 (16:34 -0500)
commit28cacaace5cde8318b7da967b3955a73cc6de91a
tree2643bf408dc5ce75697179263ab4293e8eb1125b
parent421c0f19043337a553e802b2dfe4b56d538ef4d6
drm/amdgpu/userq: defer queue publication until create completes

The userq create path publishes queues to global xarrays such as
userq_doorbell_xa and userq_xa before creation was fully complete.
Later on if create queue fails, teardown could free an already
visible queue, opening a UAF race with concurrent queue walkers.
Also calling amdgpu_userq_put in such cases complicates the cleanup.

Solution is to defer queue publication until create succeeds and no
partially initialized queue is exposed.

Signed-off-by: Sunil Khatri <sunil.khatri@amd.com>
Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c