]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
drm/i915/gt: Fix NULL deref on sched_engine alloc failure
authorJoonas Lahtinen <joonas.lahtinen@linux.intel.com>
Wed, 1 Jul 2026 11:45:13 +0000 (14:45 +0300)
committerRodrigo Vivi <rodrigo.vivi@intel.com>
Mon, 6 Jul 2026 14:26:06 +0000 (10:26 -0400)
commit82ec992c404c3dc774c5e9f3d4aa858e97187675
tree026f7102627f4b8dffdd28b3f687e92cb3f4850b
parent005771c18c5b2c98cb4e7517661aea460990fd3f
drm/i915/gt: Fix NULL deref on sched_engine alloc failure

Avoid using intel_context_put() before intel_context_init() in
execlists_create_virtual() as the kref_put() inside would lead
to NULL deref on the IOCTL path when sched_engine allocation fails.

Discovered using AI-assisted static analysis confirmed by
Intel Product Security.

Reported-by: Martin Hodo <martin.hodo@intel.com>
Fixes: 3e28d37146db ("drm/i915: Move priolist to new i915_sched_engine object")
Cc: Matthew Brost <matthew.brost@intel.com>
Cc: Daniele Ceraolo Spurio <daniele.ceraolospurio@intel.com>
Cc: Tvrtko Ursulin <tursulin@ursulin.net>
Cc: <stable@vger.kernel.org> # v5.15+
Signed-off-by: Joonas Lahtinen <joonas.lahtinen@linux.intel.com>
Reviewed-by: Andi Shyti <andi.shyti@linux.intel.com>
Signed-off-by: Tvrtko Ursulin <tursulin@ursulin.net>
Link: https://lore.kernel.org/r/20260701114513.221254-1-joonas.lahtinen@linux.intel.com
(cherry picked from commit 4f2a12f2d50e9f48227656e4dcbd6423506be31d)
Signed-off-by: Rodrigo Vivi <rodrigo.vivi@intel.com>
drivers/gpu/drm/i915/gt/intel_execlists_submission.c