diff options
| author | Dave Airlie <airlied@redhat.com> | 2026-06-12 12:06:58 +1000 |
|---|---|---|
| committer | Danilo Krummrich <dakr@kernel.org> | 2026-06-21 15:42:11 +0200 |
| commit | 5e17160d41d92823f3379c1982e1369680c5ce4d (patch) | |
| tree | 6d7451d614dc2f8c0d18d639a13cf2b76b6349d7 /tools/perf/scripts/python/export-to-sqlite.py | |
| parent | 98b46e693b912eef0e6d497327489113845cbd15 (diff) | |
nouveau/gem: reserve the bo in the info ioctl around the vma lookup
In the non-uvmm path, there could be a race between the info lookup
finding the vma, and the gem close path closing the vma leading
to a use-after-free.
Spotted with the help of Opus 4.6.
Signed-off-by: Dave Airlie <airlied@redhat.com>
Fixes: e758a3111914 ("drm/nouveau: fixup gem_info ioctl to return client-specific bo virtual")
Cc: stable@vger.kernel.org
Link: https://patch.msgid.link/20260612020658.3176270-1-airlied@gmail.com
Signed-off-by: Danilo Krummrich <dakr@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python/export-to-sqlite.py')
0 files changed, 0 insertions, 0 deletions