TencentOS-kernel/drivers/gpu
Doug Horn 51647f7877 Fix use after free in get_capset_info callback.
[ Upstream commit e219688fc5c3d0d9136f8d29d7e0498388f01440 ]

If a response to virtio_gpu_cmd_get_capset_info takes longer than
five seconds to return, the callback will access freed kernel memory
in vg->capsets.

Signed-off-by: Doug Horn <doughorn@google.com>
Link: http://patchwork.freedesktop.org/patch/msgid/20200902210847.2689-2-gurchetansingh@chromium.org
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-03-16 16:39:22 +08:00
..
drm Fix use after free in get_capset_info callback. 2021-03-16 16:39:22 +08:00
host1x gpu: host1x: debug: Fix multiple channels emitting messages simultaneously 2021-03-16 16:33:25 +08:00
ipu-v3 gpu: ipu-v3: image-convert: Wait for all EOFs before completing a tile 2021-03-16 16:34:14 +08:00
vga Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
Makefile Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00