]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock
authorMaíra Canal <mcanal@igalia.com>
Mon, 30 Mar 2026 17:51:46 +0000 (14:51 -0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 22 Apr 2026 11:30:36 +0000 (13:30 +0200)
commit7f58074facc5de12c97e8a2c2fcbebb154aa8440
tree1437f129bd96ac31b2540d3ed5a60de14804ca3a
parent3eb7dd55021d0f4308fbea0bea21d2118984d8e7
drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock

[ Upstream commit 338c56050d8e892604da97f67bfa8cc4015a955f ]

The mmap callback reads bo->madv without holding madv_lock, racing with
concurrent DRM_IOCTL_VC4_GEM_MADVISE calls that modify the field under
the same lock. Add the missing locking to prevent the data race.

Fixes: b9f19259b84d ("drm/vc4: Add the DRM_IOCTL_VC4_GEM_MADVISE ioctl")
Reviewed-by: Melissa Wen <mwen@igalia.com>
Link: https://patch.msgid.link/20260330-vc4-misc-fixes-v1-4-92defc940a29@igalia.com
Signed-off-by: Maíra Canal <mcanal@igalia.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/gpu/drm/vc4/vc4_bo.c