linux/drivers/gpu
Ketil Johnsen 7051f6ba96 drm/panthor: Fix UAF race between device unplug and FW event processing
The function panthor_fw_unplug() will free the FW memory sections.
The problem is that there could still be pending FW events which are yet
not handled at this point. process_fw_events_work() can in this case try
to access said freed memory.

Simply call disable_work_sync() to both drain and prevent future
invocation of process_fw_events_work().

Signed-off-by: Ketil Johnsen <ketil.johnsen@arm.com>
Fixes: de85488138 ("drm/panthor: Add the scheduler logical block")
Reviewed-by: Liviu Dudau <liviu.dudau@arm.com>
Link: https://patch.msgid.link/20251027140217.121274-1-ketil.johnsen@arm.com
Signed-off-by: Liviu Dudau <liviu.dudau@arm.com>
History 2025-11-03 14:25:21 +00:00
..
drm drm/panthor: Fix UAF race between device unplug and FW event processing 2025-11-03 14:25:21 +00:00
host1x gpu: host1x: Use dev_err_probe() in probe path 2025-09-11 19:12:53 +02:00
ipu-v3 gpu: ipu-v3: Switch to irq_find_mapping() 2025-05-16 21:06:12 +02:00
nova-core drm next for 6.18-rc1 2025-10-02 12:47:25 -07:00
trace gpu/trace: make TRACE_GPU_MEM configurable 2025-07-08 09:34:47 -07:00
vga vga_switcheroo: Use pci_is_display() 2025-07-17 15:30:13 -05:00
Makefile gpu: nova-core: add initial driver stub 2025-03-09 19:24:27 +01:00