Doug Horn 18136b33e3 Fix use after free in get_capset_info callback. ... [ Upstream commit e219688fc5 ] If a response to virtio_gpu_cmd_get_capset_info takes longer than five seconds to return, the callback will access freed kernel memory in vg->capsets. Signed-off-by: Doug Horn <doughorn@google.com> Link: http://patchwork.freedesktop.org/patch/msgid/20200902210847.2689-2-gurchetansingh@chromium.org Signed-off-by: Gerd Hoffmann <kraxel@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-10-30 10:38:31 +01:00
..
drm	Fix use after free in get_capset_info callback.	2020-10-30 10:38:31 +01:00
host1x	gpu: host1x: debug: Fix multiple channels emitting messages simultaneously	2020-08-19 08:14:52 +02:00
ipu-v3	gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers	2020-08-21 11:05:35 +02:00
vga	vga_switcheroo: Fix missing gpu_bound call at audio client registration	2018-11-13 11:09:00 -08:00
Makefile