github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-06-08 14:42:37 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
726e2766e0
linux/drivers
History
Ben Skeggs 726e2766e0 drm/ttm: unbind ttm before destroying node in accel move cleanup 
commit eac2095398 upstream.

Nouveau makes the assumption that if a TTM is bound there will be a mm_node
around for it and the backwards ordering here resulted in a use-after-free
on some eviction paths.

Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Cc: Josh Boyer <jwboyer@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2011-10-25 07:10:15 +02:00
..
accessibility
acpi acpica: ACPI_MAX_SLEEP should be 2 sec, not 20 2011-10-03 11:40:25 -07:00
amba
ata ahci: Enable SB600 64bit DMA on Asus M3A 2011-10-16 14:14:54 -07:00
atm
auxdisplay
base firmware loader: allow builtin firmware load even if usermodehelper is disabled 2011-10-03 11:41:07 -07:00
bcma
block floppy: use del_timer_sync() in init cleanup 2011-10-03 11:40:36 -07:00
bluetooth Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6 into for-davem 2011-06-17 12:40:36 -04:00
cdrom
char TPM: Zero buffer after copying to userspace 2011-10-03 11:40:58 -07:00
clk
clocksource
connector Connector: Correctly set the error code in case of success when dispatching receive callbacks 2011-06-07 12:02:00 -07:00
cpufreq drivers/cpufreq/pcc-cpufreq.c: avoid NULL pointer dereference 2011-10-03 11:40:31 -07:00
cpuidle
crypto crypto: caam - fix operator precedence in shared descriptor allocation 2011-06-30 07:43:27 +08:00
dca
dio
dma dmaengine: shdma: SH_DMAC_MAX_CHANNELS message fix 2011-06-14 15:03:07 +09:00
edac i7core_edac: fixed typo in error count calculation 2011-08-29 13:29:06 -07:00
eisa
firewire firewire: ohci: add no MSI quirk for O2Micro controller 2011-10-03 11:40:33 -07:00
firmware drivers/firmware/sigma.c needs MODULE_LICENSE 2011-08-04 21:58:38 -07:00
gpio gpio: wm831x: add a missing break in wm831x_gpio_dbg_show 2011-07-15 14:03:30 -06:00
gpu drm/ttm: unbind ttm before destroying node in accel move cleanup 2011-10-25 07:10:15 +02:00
hid HID: magicmouse: ignore 'ivalid report id' while switching modes, v2 2011-10-25 07:10:15 +02:00
hwmon hwmon: (w83627ehf) Properly report thermal diode sensors 2011-10-25 07:10:14 +02:00
hwspinlock
i2c Merge branch 'for-30-rc5/all-i2c' of git://git.fluff.org/bjdooks/linux 2011-07-07 16:29:29 -07:00
ide ide-disk: Fix request requeuing 2011-10-16 14:14:51 -07:00
idle
ieee802154
infiniband cxgb3i: convert cdev->l2opt to use rcu to prevent NULL dereference 2011-10-03 11:41:08 -07:00
input input: pmic8xxx-pwrkey: Do not use mfd_get_data() 2011-07-05 10:38:43 +02:00
isdn net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared 2011-08-15 18:31:38 -07:00
leds drivers/leds/ledtrig-timer.c: fix broken sysfs delay handling 2011-10-03 11:40:31 -07:00
lguest
macintosh
mca
md dm table: avoid crash if integrity profile changes 2011-10-16 14:14:53 -07:00
media uvcvideo: Fix crash when linking entities 2011-10-25 07:10:15 +02:00
memstick
message
mfd mfd: Make omap-usb-host TLL mode work again 2011-10-03 11:40:27 -07:00
misc lis3: fix regression of HP DriveGuard with 8bit chip 2011-10-16 14:14:51 -07:00
mmc mmc: mxs-mmc: fix clock rate setting 2011-10-16 14:14:54 -07:00
mtd powerpc/85xx: fix NAND_CMD_READID read bytes number 2011-06-22 06:08:48 -05:00
net e1000e: workaround for packet drop on 82579 at 100Mbps 2011-10-16 14:14:55 -07:00
nfc
nubus
of
oprofile
parisc
parport
pci x86, iommu: Mark DMAR IRQ as non-threaded 2011-10-03 11:40:29 -07:00
pcmcia pcmcia: pxa2xx/vpac270: free gpios on exist rather than requesting 2011-07-11 14:26:34 +08:00
platform Platform: fix samsung-laptop DMI identification for N150/N210/220/N230 2011-10-25 07:10:14 +02:00
pnp
power
pps
ps3
ptp
rapidio rapidio: fix use of non-compatible registers 2011-10-03 11:39:46 -07:00
regulator regulator: tps65910: Add missing breaks in switch/case 2011-10-03 11:40:01 -07:00
rtc rtc: Fix RTC PIE frequency limit 2011-10-03 11:40:08 -07:00
s390 qdio: clear shared DSCI before scheduling the queue handler 2011-10-03 11:40:44 -07:00
sbus
scsi libsas: fix panic when single phy is disabled on a wide port 2011-10-16 14:14:53 -07:00
sfi
sh drivers: sh: resume enabled clocks fix 2011-06-14 15:15:25 +09:00
sn
spi spi/s3c64xx: Bug fix for SPI with different FIFO level 2011-07-06 15:03:08 +09:00
ssb ssb: fix init regression of hostmode PCI core 2011-07-07 13:06:08 -04:00
staging staging: rtl8192u: declare MODULE_FIRMWARE 2011-08-17 10:55:50 -07:00
target tcm_fc: Fix conversion spec warning 2011-06-24 00:09:16 +00:00
tc
telephony
thermal
tty TTY: pty, fix pty counting 2011-10-03 11:39:49 -07:00
uio
usb usb/host/pci-quirks.c: correct annotation of `ehci_dmi_nohandoff_table' 2011-10-03 11:41:02 -07:00
uwb
vhost
video savagedb: Fix typo causing regression in savage4 series video chip detection 2011-10-03 11:39:57 -07:00
virtio
vlynq
w1 w1: ds1wm: add a reset recovery parameter 2011-07-08 21:14:44 -07:00
watchdog watchdog: shwdt: fix usage of mod_timer 2011-08-04 21:58:42 -07:00
xen Merge branch 'stable/bug.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen 2011-06-20 09:01:33 -07:00
zorro zorro: Defer device_register() until all devices have been identified 2011-10-03 11:40:57 -07:00
Kconfig
Makefile