]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
drm/xe/hw_engine: Fix double-free of managed BO in error path
authorShuicheng Lin <shuicheng.lin@intel.com>
Fri, 26 Jun 2026 21:06:31 +0000 (21:06 +0000)
committerThomas Hellström <thomas.hellstrom@linux.intel.com>
Thu, 2 Jul 2026 10:29:43 +0000 (12:29 +0200)
commit7ac3cae7a251d28e9079de07a991bd4eb2bb7fd8
tree6e56d95c2a4984cfab98d5fd1caeb32cb6137ef7
parent0c56ea482aab1470b96a525ef53fa3eb8704f9a6
drm/xe/hw_engine: Fix double-free of managed BO in error path

The error path in hw_engine_init() explicitly frees a BO allocated
with xe_managed_bo_create_pin_map() via xe_bo_unpin_map_no_vm().
Since the managed BO already has a devm cleanup action registered,
this causes a double-free when devm unwinds during probe failure.

Remove the explicit free and let devm handle it, consistent with
all other xe_managed_bo_create_pin_map() callers.

Fixes: 0e1a47fcabc8 ("drm/xe: Add a helper for DRM device-lifetime BO create")
Assisted-by: Claude:claude-opus-4.6
Reviewed-by: Zongyao Bai <zongyao.bai@intel.com>
Link: https://patch.msgid.link/20260626210631.3887291-1-shuicheng.lin@intel.com
Signed-off-by: Shuicheng Lin <shuicheng.lin@intel.com>
(cherry picked from commit e459a3bdeb117be496d7f229e2ea1f6c9fe4080b)
Signed-off-by: Thomas Hellström <thomas.hellstrom@linux.intel.com>
drivers/gpu/drm/xe/xe_hw_engine.c