diff options
| author | Dave Airlie <airlied@redhat.com> | 2026-02-02 11:17:06 +1000 |
|---|---|---|
| committer | Dave Airlie <airlied@redhat.com> | 2026-02-02 11:17:12 +1000 |
| commit | 3cc9398a9ea69b77de01b370463b706c354e52fb (patch) | |
| tree | d9a766720c7cc015f53427a6b923c4c4515b04ef /tools/perf/lib/Documentation/tutorial/git@git.tavy.me:linux.git | |
| parent | a60f627cf4ab474aebf15f62c55eadabab9780da (diff) | |
| parent | 52b330799e2d6f825ae2bb74662ec1b10eb954bb (diff) | |
Merge tag 'exynos-drm-next-for-v6.20' of git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos into drm-next
Fix three regressions
. Fix a regression where vidi_connection_ioctl() used the wrong device
to look up the vidi context. It stores the vidi device in exynos_drm_private
and uses it in ioctl(), preventing invalid pointer access and related bugs.
. Fix a security regression where vidi_connection_ioctl() directly dereferenced
a user pointer for EDID data. It copies EDID from user space
with copy_from_user() into kernel memory before use, preventing arbitrary
kernel memory access.
. Fix a concurrency regression where vidi_context members related
to EDID memory were accessed without locking. It protects alloc/free and
state updates with ctx->lock, preventing race conditions and use-after-free bugs.
Signed-off-by: Dave Airlie <airlied@redhat.com>
From: Inki Dae <inki.dae@samsung.com>
Link: https://patch.msgid.link/20260201143939.27074-1-inki.dae@samsung.com
Diffstat (limited to 'tools/perf/lib/Documentation/tutorial/git@git.tavy.me:linux.git')
0 files changed, 0 insertions, 0 deletions
