]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ff287df) | patch
drm/amdkfd: fix UAF race in destroy_queue_cpsch
authorAlysa Liu <Alysa.Liu@amd.com>
Wed, 27 May 2026 15:31:35 +0000 (11:31 -0400)
committerAlex Deucher <alexander.deucher@amd.com>
Wed, 3 Jun 2026 18:46:55 +0000 (14:46 -0400)
commit181eda5549c5d9fad3fdb88b050fbf0844d884f8
treea624cb761df901d3fa66ff6260f739f1b9c0235btree | snapshot
parentff287df16a1a58aca78b08d1f3ee09fc44da0351commit | diff
drm/amdkfd: fix UAF race in destroy_queue_cpsch

wait_on_destroy_queue() drops locks to wait for queue resume, allowing
a concurrent destroy to free the queue. Use is_being_destroyed flag to
serialize destruction.

Reviewed-by: Amir Shetaia <Amir.Shetaia@amd.com>
Signed-off-by: Alysa Liu <Alysa.Liu@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
(cherry picked from commit ac081deaf16a639ea7dff2f285fe421a33c1ade0)
drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c diff | blob | blame | history
A mirror of Linus' kernel repository