]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
authorJoonas Lahtinen <joonas.lahtinen@linux.intel.com>
Wed, 1 Jul 2026 07:55:55 +0000 (10:55 +0300)
committerRodrigo Vivi <rodrigo.vivi@intel.com>
Mon, 6 Jul 2026 14:25:54 +0000 (10:25 -0400)
commit2b56757a9a7456825eb668fde92299e01c5e2721
treeb17a255fcac4ac1b8bf14cd23947216d1fa0138b
parente91da9053006da622b865e672a4a37439a3bb88b
drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU

Setting context engine slot N into I915_ENGINE_CLASS_INVALID /
I915_ENGINE_CLASS_INVALID_NONE and attempting to apply
I915_CONTEXT_PARAM_SSEU to the same slot N will deref NULL.
Fix that.

Discovered using AI-assisted static analysis confirmed by
Intel Product Security.

Reported-by: Martin Hodo <martin.hodo@intel.com>
Fixes: d4433c7600f7 ("drm/i915/gem: Use the proto-context to handle create parameters (v5)")
Cc: Faith Ekstrand <faith.ekstrand@collabora.com>
Cc: Simona Vetter <simona.vetter@ffwll.ch>
Cc: Tvrtko Ursulin <tvrtko.ursulin@igalia.com>
Cc: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
Cc: <stable@vger.kernel.org> # v5.15+
Signed-off-by: Joonas Lahtinen <joonas.lahtinen@linux.intel.com>
Reviewed-by: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
Reviewed-by: Andi Shyti <andi.shyti@linux.intel.com>
Link: https://patch.msgid.link/20260701075555.52142-1-joonas.lahtinen@linux.intel.com
(cherry picked from commit 36eda5b5c2d40da41cc0a5403c26986237cf9e87)
Signed-off-by: Rodrigo Vivi <rodrigo.vivi@intel.com>
drivers/gpu/drm/i915/gem/i915_gem_context.c