diff options
| author | Lizhi Hou <lizhi.hou@amd.com> | 2026-06-10 22:51:50 -0700 |
|---|---|---|
| committer | Lizhi Hou <lizhi.hou@amd.com> | 2026-06-29 10:44:03 -0700 |
| commit | b4a0500fdf6e61a6c5f92ff2e61bc91578075803 (patch) | |
| tree | 6ff0cd4a12592a362630fc62c0d438548ab98a87 /rust/kernel/drm/gpuvm/git@git.tavy.me:linux-stable.git | |
| parent | 5c72124186d6983e90b7c44229fcb768e3ff769a (diff) | |
accel/amdxdna: Fix iommu domain lifetime race during device removal
When force_iova mode is enabled, amdxdna_remove() frees xdna->domain. If
amdxdna_gem_obj_free() is called after device removal, it may attempt to
access xdna->domain, resulting in a use-after-free.
Fix the race by adding freeing xdna->domain as a managed release action,
so its lifetime is managed by DRM and remains valid until all managed
resources are released.
Fixes: ece3e8980907 ("accel/amdxdna: Allow forcing IOVA-based DMA via module parameter")
Reviewed-by: Mario Limonciello (AMD) <superm1@kernel.org>
Signed-off-by: Lizhi Hou <lizhi.hou@amd.com>
Link: https://patch.msgid.link/20260611055150.3070216-3-lizhi.hou@amd.com
Diffstat (limited to 'rust/kernel/drm/gpuvm/git@git.tavy.me:linux-stable.git')
0 files changed, 0 insertions, 0 deletions