aboutsummaryrefslogtreecommitdiff
path: root/lib/crypto/mpi/mpi-div.c
diff options
context:
space:
mode:
authorMatthew Auld <[email protected]>2023-10-05 17:38:55 +0100
committerRodrigo Vivi <[email protected]>2023-12-21 11:42:10 -0500
commit3a13c2de442d6bfaef9c102cd1092e6cae22b753 (patch)
tree1a1afbf10aa2c874d99c97c324454f6c66cc286a /lib/crypto/mpi/mpi-div.c
parent5708a1080a2e455ca9f35e372f107d0c030358de (diff)
drm/xe/hwmon: fix uaf on unload
It doesn't look like you can mix and match devm_ and drmmm_ for a managed resource. For drmmm the resources are all tracked in drm with its own list, and there is only one devm_ resource for the entire list. If the driver itself also adds some of its own devm resources, then those will be released first. In the case of hwmon the devm_kzalloc will be freed before the drmmm_ action to destroy the mutex allocated within, leading to uaf. Since hwmon itself wants to use devm, rather use that for the mutex destroy. Closes: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/766 Signed-off-by: Matthew Auld <[email protected]> Cc: Badal Nilawar <[email protected]> Cc: Rodrigo Vivi <[email protected]> Reviewed-by: Rodrigo Vivi <[email protected]> Signed-off-by: Rodrigo Vivi <[email protected]>
Diffstat (limited to 'lib/crypto/mpi/mpi-div.c')
0 files changed, 0 insertions, 0 deletions