linux/drivers/gpu
Thomas Zimmermann 6596aae255 drm/panic: Do not use un-escaped URL as format string
Replace the direct use of DRM_PANIC_SCREEN_QR_CODE_URL in snprintf()
with a %s conversion specifier. Avoids a possible vulnerabilty from
a crafted URL string.

As the attacker needs to control the kernel at the Kconfig level, the
potential for an exploit is likely low.

Signed-off-by: Thomas Zimmermann <tzimmermann@suse.de>
Reviewed-by: Jocelyn Falempe <jfalempe@redhat.com>
Fixes: cb5164ac43 ("drm/panic: Add a QR code panic screen")
Cc: Javier Martinez Canillas <javierm@redhat.com>
Cc: Jocelyn Falempe <jfalempe@redhat.com>
Cc: dri-devel@lists.freedesktop.org
Cc: <stable@vger.kernel.org> # v6.12+
Link: https://patch.msgid.link/20260911124540.279841-2-tzimmermann@suse.de
2026-09-17 09:16:25 +02:00
..
drm drm/panic: Do not use un-escaped URL as format string 2026-09-17 09:16:25 +02:00
host1x Linux 7.2 2026-08-20 10:58:44 +10:00
ipu-v3
nova-core drm for 7.3-rc1 2026-08-21 08:41:00 -07:00
tests gpu/tests/buddy: add dirty tracker performance KUnit test 2026-08-27 17:59:01 +05:30
trace
vga vga-switcheroo: Remove unused interfaces 2026-09-11 16:52:43 +02:00
buddy.c Merge drm/drm-next into drm-misc-next 2026-09-07 13:44:24 +02:00
Kconfig gpu: Fix dependencies in CONFIG_GPU_BUDDY_KUNIT_TEST 2026-07-29 13:06:24 +02:00
Makefile gpu: drm: nova: depend on nova-core and use its symbols 2026-06-29 11:28:39 +02:00