]> git.ipfire.org Git - thirdparty/kernel/stable-queue.git/commitdiff
drop 1 patch from queue-5.15 based on RC review feedback
authorSasha Levin <sashal@kernel.org>
Fri, 17 Apr 2026 19:05:07 +0000 (15:05 -0400)
committerSasha Levin <sashal@kernel.org>
Fri, 17 Apr 2026 19:05:07 +0000 (15:05 -0400)
Dropped patches:

- "dmaengine: idxd: Fix not releasing workqueue on .release()"
  Queues: 5.15
  Reason: causes double destroy_workqueue() (UAF) on idxd_remove in 5.15 because the upstream refactor a409e919ca32 that removed destroy_workqueue() from idxd_remove() is not backported to 5.15
  Report: https://lore.kernel.org/stable/72718777-af7f-4d1a-902d-04e765a8e8aa@oracle.com/

queue-5.15/dmaengine-idxd-fix-not-releasing-workqueue-on-.relea.patch [deleted file]
queue-5.15/series

diff --git a/queue-5.15/dmaengine-idxd-fix-not-releasing-workqueue-on-.relea.patch b/queue-5.15/dmaengine-idxd-fix-not-releasing-workqueue-on-.relea.patch
deleted file mode 100644 (file)
index 3269dc1..0000000
+++ /dev/null
@@ -1,37 +0,0 @@
-From 642d51d755da3cbcbebc40cb74c8a25c91f9d076 Mon Sep 17 00:00:00 2001
-From: Sasha Levin <sashal@kernel.org>
-Date: Wed, 21 Jan 2026 10:34:33 -0800
-Subject: dmaengine: idxd: Fix not releasing workqueue on .release()
-
-From: Vinicius Costa Gomes <vinicius.gomes@intel.com>
-
-[ Upstream commit 3d33de353b1ff9023d5ec73b9becf80ea87af695 ]
-
-The workqueue associated with an DSA/IAA device is not released when
-the object is freed.
-
-Fixes: 47c16ac27d4c ("dmaengine: idxd: fix idxd conf_dev 'struct device' lifetime")
-Reviewed-by: Dave Jiang <dave.jiang@intel.com>
-Signed-off-by: Vinicius Costa Gomes <vinicius.gomes@intel.com>
-Link: https://patch.msgid.link/20260121-idxd-fix-flr-on-kernel-queues-v3-v3-7-7ed70658a9d1@intel.com
-Signed-off-by: Vinod Koul <vkoul@kernel.org>
-Signed-off-by: Sasha Levin <sashal@kernel.org>
----
- drivers/dma/idxd/sysfs.c | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/drivers/dma/idxd/sysfs.c b/drivers/dma/idxd/sysfs.c
-index 489a9d8850764..ee208dfdd0cb5 100644
---- a/drivers/dma/idxd/sysfs.c
-+++ b/drivers/dma/idxd/sysfs.c
-@@ -1271,6 +1271,7 @@ static void idxd_conf_device_release(struct device *dev)
- {
-       struct idxd_device *idxd = confdev_to_idxd(dev);
-+      destroy_workqueue(idxd->wq);
-       kfree(idxd->groups);
-       kfree(idxd->wqs);
-       kfree(idxd->engines);
--- 
-2.53.0
-
index fe8535e2edb1c37c99f09d4a23071e3f8ff2bad9..e75891e07c70de75752b93e1a6b4aa8a8745c20f 100644 (file)
@@ -370,7 +370,6 @@ ext4-avoid-allocate-block-from-corrupted-group-in-ext4_mb_find_by_goal.patch
 ext4-reject-mount-if-bigalloc-with-s_first_data_block-0.patch
 ext4-fix-iloc.bh-leak-in-ext4_fc_replay_inode-error-paths.patch
 ext4-always-drain-queued-discard-work-in-ext4_mb_release.patch
-dmaengine-idxd-fix-not-releasing-workqueue-on-.relea.patch
 phy-ti-j721e-wiz-fix-device-node-reference-leak-in-w.patch
 dmaengine-xilinx-xilinx_dma-fix-dma_device-direction.patch
 dmaengine-xilinx-xilinx_dma-fix-residue-calculation-.patch