Lizhi Hou 6a1f6cb759 accel/amdxdna: Fix possible use-after-free when freeing device BO ... When the DRM file descriptor is closed, amdxdna_client_cleanup() frees the client structure. If device BOs are still alive, freeing them may access abo->client and result in a use-after-free. Move amdxdna_gem_heap_free(), which accesses abo->client, before clearing abo->client in the BO close callback. Also track the heap BOs referenced by device BOs so they can be accessed without dereferencing abo->client. Fixes: dbc8fd7a03 ("accel/amdxdna: Add expandable device heap support") Reviewed-by: Max Zhen <max.zhen@amd.com> Signed-off-by: Lizhi Hou <lizhi.hou@amd.com> Link: https://patch.msgid.link/20260901160129.3812405-1-lizhi.hou@amd.com		2026-09-01 10:42:22 -07:00
..
amdxdna	accel/amdxdna: Fix possible use-after-free when freeing device BO	2026-09-01 10:42:22 -07:00
ethosu	Merge drm/drm-next into drm-misc-next	2026-08-31 09:01:06 +02:00
habanalabs	Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses	2026-02-22 08:26:33 -08:00
ivpu	Merge drm/drm-next into drm-misc-next	2026-08-31 09:01:06 +02:00
qaic	Merge drm/drm-next into drm-misc-next	2026-08-31 09:01:06 +02:00
rocket	Linux 7.2	2026-08-20 10:58:44 +10:00
drm_accel.c	drm: move drm based debugfs funcs to drm_debugfs.c	2025-07-04 15:58:22 +02:00
Kconfig	accel: Add Arm Ethos-U NPU driver	2025-10-24 15:07:39 -05:00
Makefile	accel: Add Arm Ethos-U NPU driver	2025-10-24 15:07:39 -05:00