drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
stable inclusion from stable-v5.10.186 commit 485fe165084bdff372049f9d109326756764b620 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I8J4KH Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=485fe165084bdff372049f9d109326756764b620 -------------------------------- [ Upstream commit 48bfd025 ] If it is async, runqueue_node is freed in g2d_runqueue_worker on another worker thread. So in extreme cases, if g2d_runqueue_worker runs first, and then executes the following if statement, there will be use-after-free. Signed-off-by:Min Li <lm0963hack@gmail.com> Reviewed-by:
Andi Shyti <andi.shyti@kernel.org> Signed-off-by:
Inki Dae <inki.dae@samsung.com> Signed-off-by:
Sasha Levin <sashal@kernel.org> Signed-off-by:
sanglipeng <sanglipeng1@jd.com>
Loading
Please sign in to comment