]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fbace61) | patch
drm/amdkfd: fix UAF race in destroy_queue_cpsch
authorAlysa Liu <Alysa.Liu@amd.com>
Wed, 27 May 2026 15:31:35 +0000 (11:31 -0400)
committerAlex Deucher <alexander.deucher@amd.com>
Wed, 3 Jun 2026 17:48:33 +0000 (13:48 -0400)
commitac081deaf16a639ea7dff2f285fe421a33c1ade0
tree97bacf34b2f538f159ac3d8adfad86f5b7fb620ftree | snapshot
parentfbace613a5a4a910956380c1cc1f49e321e3906acommit | diff
drm/amdkfd: fix UAF race in destroy_queue_cpsch

wait_on_destroy_queue() drops locks to wait for queue resume, allowing
a concurrent destroy to free the queue. Use is_being_destroyed flag to
serialize destruction.

Reviewed-by: Amir Shetaia <Amir.Shetaia@amd.com>
Signed-off-by: Alysa Liu <Alysa.Liu@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c diff | blob | blame | history
A mirror of Linus' kernel repository