]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
drm/amdgpu: add upper bound check on user inputs in wait ioctl
authorSunil Khatri <sunil.khatri@amd.com>
Tue, 24 Feb 2026 06:43:09 +0000 (12:13 +0530)
committerAlex Deucher <alexander.deucher@amd.com>
Wed, 25 Feb 2026 21:47:17 +0000 (16:47 -0500)
commitfcec012c664247531aed3e662f4280ff804d1476
treeec1d60e1ad6f97c44ef600870b02a2fb9adbac9c
parentbe267e15f99bc97cbe202cd556717797cdcf79a5
drm/amdgpu: add upper bound check on user inputs in wait ioctl

Huge input values in amdgpu_userq_wait_ioctl can lead to a OOM and
could be exploited.

So check these input value against AMDGPU_USERQ_MAX_HANDLES
which is big enough value for genuine use cases and could
potentially avoid OOM.

v2: squash in Srini's fix

Signed-off-by: Sunil Khatri <sunil.khatri@amd.com>
Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c