Osama Abdelkader ec86c43dcf drm/panthor: validate userspace queue count against initialized firmware slot count ... In panthor_drv.c:panthor_ioctl_group_create(), the queue count is validated against the hardcoded maximum: if (!args->queues.count || args->queues.count > MAX_CS_PER_CSG) return -EINVAL; However, if the firmware reports fewer slots than MAX_CS_PER_CSG, panthor_fw_init_ifaces() will only initialize that smaller number of stream interfaces. If unprivileged userspace requests more queues than the firmware reported (but no more than MAX_CS_PER_CSG), cs_slot_prog_locked() fetches an uninitialized stream interface and may crash when dereferencing cs_iface->input->ringbuf_base. Fixes: de85488138 ("drm/panthor: Add the scheduler logical block") Cc: stable@vger.kernel.org Reported-by: sashiko-bot@kernel.org Closes: https://sashiko.dev/#/patchset/20260803141149.68182-1-osama.abdelkader@gmail.com?part=1 Signed-off-by: Osama Abdelkader <osama.abdelkader@gmail.com> Reviewed-by: Steven Price <steven.price@arm.com> Reviewed-by: Liviu Dudau <liviu.dudau@arm.com> Reviewed-by: Boris Brezillon <boris.brezillon@collabora.com> Link: https://patch.msgid.link/20260804160048.174148-1-osama.abdelkader@gmail.com Signed-off-by: Steven Price <steven.price@arm.com>		2026-09-30 16:45:54 +01:00
..
drm	drm/panthor: validate userspace queue count against initialized firmware slot count	2026-09-30 16:45:54 +01:00
host1x	Linux 7.2	2026-08-20 10:58:44 +10:00
ipu-v3
nova-core	drm for 7.3-rc1	2026-08-21 08:41:00 -07:00
tests	drm/tests/gpu_buddy: fix interleaving in buffer clearance test	2026-08-06 18:07:10 +05:30
trace
vga
buddy.c	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
Kconfig	gpu: Fix dependencies in CONFIG_GPU_BUDDY_KUNIT_TEST	2026-07-29 13:06:24 +02:00
Makefile