diff options
| author | Jean-Philippe Brucker <[email protected]> | 2022-04-26 14:04:45 +0100 |
|---|---|---|
| committer | Will Deacon <[email protected]> | 2022-05-06 16:25:39 +0100 |
| commit | cbd23144f7662b00bcde32a938c4a4057e476d68 (patch) | |
| tree | 258cc5bf56bc772f6db3fef3915dbc3820f1bdf3 /include/linux/fpga/fpga-mgr.h | |
| parent | b131fa8c1d2afd05d0b7598621114674289c2fbb (diff) | |
iommu/arm-smmu-v3-sva: Fix mm use-after-free
We currently call arm64_mm_context_put() without holding a reference to
the mm, which can result in use-after-free. Call mmgrab()/mmdrop() to
ensure the mm only gets freed after we unpinned the ASID.
Fixes: 32784a9562fb ("iommu/arm-smmu-v3: Implement iommu_sva_bind/unbind()")
Signed-off-by: Jean-Philippe Brucker <[email protected]>
Tested-by: Zhangfei Gao <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Will Deacon <[email protected]>
Diffstat (limited to 'include/linux/fpga/fpga-mgr.h')
0 files changed, 0 insertions, 0 deletions