]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
drm/amdgpu: add upper bound check on user inputs in wait ioctl
authorSunil Khatri <sunil.khatri@amd.com>
Tue, 24 Feb 2026 06:43:09 +0000 (12:13 +0530)
committerAlex Deucher <alexander.deucher@amd.com>
Wed, 25 Feb 2026 22:54:57 +0000 (17:54 -0500)
commit64ac7c09fc44985ec9bb6a9db740899fa40ca613
treeb84cc74810d5c12cdc14511877c7e200abb05868
parentea78f8c68f4f6211c557df49174c54d167821962
drm/amdgpu: add upper bound check on user inputs in wait ioctl

Huge input values in amdgpu_userq_wait_ioctl can lead to a OOM and
could be exploited.

So check these input value against AMDGPU_USERQ_MAX_HANDLES
which is big enough value for genuine use cases and could
potentially avoid OOM.

v2: squash in Srini's fix

Signed-off-by: Sunil Khatri <sunil.khatri@amd.com>
Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
(cherry picked from commit fcec012c664247531aed3e662f4280ff804d1476)
Cc: stable@vger.kernel.org
drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c