linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-11-10 20:48:12 +00:00

No description

C 96.8%
Assembly 0.9%
Rust 0.7%
Shell 0.6%
Python 0.5%
Other 0.3%

Find a file

Janusz Krzysztofik eae4bf4107 drm/i915: Fix potential overflow of shmem scatterlist length commit `029ae06743` upstream. When a scatterlists table of a GEM shmem object of size 4 GB or more is populated with pages allocated from a folio, unsigned int .length attribute of a scatterlist may get overflowed if total byte length of pages allocated to that single scatterlist happens to reach or cross the 4GB limit. As a consequence, users of the object may suffer from hitting unexpected, premature end of the object's backing pages. [278.780187] ------------[ cut here ]------------ [278.780377] WARNING: CPU: 1 PID: 2326 at drivers/gpu/drm/i915/i915_mm.c:55 remap_sg+0x199/0x1d0 [i915] ... [278.780654] CPU: 1 UID: 0 PID: 2326 Comm: gem_mmap_offset Tainted: G S U 6.17.0-rc1-CI_DRM_16981-ged823aaa0607+ #1 PREEMPT(voluntary) [278.780656] Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER [278.780658] Hardware name: Intel Corporation Meteor Lake Client Platform/MTL-P LP5x T3 RVP, BIOS MTLPFWI1.R00.3471.D91.2401310918 01/31/2024 [278.780659] RIP: 0010:remap_sg+0x199/0x1d0 [i915] ... [278.780786] Call Trace: [278.780787] <TASK> [278.780788] ? __apply_to_page_range+0x3e6/0x910 [278.780795] ? __pfx_remap_sg+0x10/0x10 [i915] [278.780906] apply_to_page_range+0x14/0x30 [278.780908] remap_io_sg+0x14d/0x260 [i915] [278.781013] vm_fault_cpu+0xd2/0x330 [i915] [278.781137] __do_fault+0x3a/0x1b0 [278.781140] do_fault+0x322/0x640 [278.781143] __handle_mm_fault+0x938/0xfd0 [278.781150] handle_mm_fault+0x12c/0x300 [278.781152] ? lock_mm_and_find_vma+0x4b/0x760 [278.781155] do_user_addr_fault+0x2d6/0x8e0 [278.781160] exc_page_fault+0x96/0x2c0 [278.781165] asm_exc_page_fault+0x27/0x30 ... That issue was apprehended by the author of a change that introduced it, and potential risk even annotated with a comment, but then never addressed. When adding folio pages to a scatterlist table, take care of byte length of any single scatterlist not exceeding max_segment. Fixes: `0b62af28f2` ("i915: convert shmem_sg_free_table() to use a folio_batch") Closes: https://gitlab.freedesktop.org/drm/i915/kernel/-/issues/14809 Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: stable@vger.kernel.org # v6.5+ Signed-off-by: Janusz Krzysztofik <janusz.krzysztofik@linux.intel.com> Reviewed-by: Andi Shyti <andi.shyti@linux.intel.com> Signed-off-by: Andi Shyti <andi.shyti@linux.intel.com> Link: https://lore.kernel.org/r/20260224094944.2447913-2-janusz.krzysztofik@linux.intel.com (cherry picked from commit `06249b4e69`) Signed-off-by: Tvrtko Ursulin <tursulin@ursulin.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		History 2026-03-19 16:08:41 +01:00
arch	s390/xor: Fix xor_xc_5() inline assembly	2026-03-19 16:08:39 +01:00
block	block: use trylock to avoid lockdep circular dependency in sysfs	2026-03-12 07:09:59 -04:00
certs	sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3	2024-09-20 19:52:48 +03:00
crypto	crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec	2026-01-30 10:32:12 +01:00
Documentation	KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM	2026-03-19 16:08:24 +01:00
drivers	drm/i915: Fix potential overflow of shmem scatterlist length	2026-03-19 16:08:41 +01:00
fs	ksmbd: fix use-after-free by using call_rcu() for oplock_info	2026-03-19 16:08:40 +01:00
include	kunit: irq: Ensure timer doesn't fire too frequently	2026-03-19 16:08:35 +01:00
init	printk changes for 6.18	2025-10-04 11:13:11 -07:00
io_uring	io_uring/net: reject SEND_VECTORIZED when unsupported	2026-03-19 16:08:38 +01:00
ipc	ipc: don't audit capability check in ipc_permissions()	2026-02-26 14:59:19 -08:00
kernel	tracing: Fix syscall events activation by ensuring refcount hits zero	2026-03-19 16:08:36 +01:00
lib	debugobject: Make it work with deferred page initialization - again	2026-03-12 07:09:08 -04:00
LICENSES	LICENSES: Replace the obsolete address of the FSF in the GFDL-1.2	2025-07-24 11:15:39 +02:00
mm	memcg: fix slab accounting in refill_obj_stock() trylock path	2026-03-19 16:08:39 +01:00
net	net: ncsi: fix skb leak in error paths	2026-03-19 16:08:40 +01:00
rust	rust: str: make NullTerminatedFormatter public	2026-03-19 16:08:24 +01:00
samples	samples/ftrace: Adjust LoongArch register restore order in direct calls	2026-01-08 10:17:11 +01:00
scripts	kbuild: rpm-pkg: Disable automatic requires for manual debuginfo package	2026-03-04 07:21:32 -05:00
security	apparmor: fix race between freeing data and fs accessing it	2026-03-13 17:23:30 +01:00
sound	ALSA: usb-audio: Improve Focusrite sample rate filtering	2026-03-19 16:08:31 +01:00
tools	selftests: fix mntns iteration selftests	2026-03-19 16:08:36 +01:00
usr	gen_init_cpio: Ignore fsync() returning EINVAL on pipes	2025-10-07 09:53:05 -07:00
virt	KVM: Don't clobber irqfd routing type when deassigning irqfd	2026-02-11 13:41:44 +01:00
.clang-format	memblock: drop for_each_free_mem_pfn_range_in_zone_from()	2025-09-14 08:49:03 +03:00
.clippy.toml	rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` configuration	2025-05-07 00:11:47 +02:00
.cocciconfig	scripts: add Linux .cocciconfig for coccinelle	2016-07-22 12:13:39 +02:00
.editorconfig	.editorconfig: remove trim_trailing_whitespace option	2024-06-13 16:47:52 +02:00
.get_maintainer.ignore	MAINTAINERS: remove Alyssa Rosenzweig	2025-09-18 21:17:31 +02:00
.gitattributes	.gitattributes: set diff driver for Rust source code files	2023-05-31 17:48:25 +02:00
.gitignore	.gitignore: ignore compile_commands.json globally	2025-08-12 15:53:55 -07:00
.mailmap	8 hotfixes. 4 are cc:stable, 7 are against mm/.	2025-11-26 12:38:05 -08:00
.pylintrc	tools: docs: parse-headers.py: move it from sphinx dir	2025-08-29 15:54:42 -06:00
.rustfmt.toml	rust: add `.rustfmt.toml`	2022-09-28 09:02:20 +02:00
COPYING	COPYING: state that all contributions really are covered by this file	2020-02-10 13:32:20 -08:00
CREDITS	MAINTAINERS: mark ISDN subsystem as orphan	2025-10-27 17:49:45 -07:00
Kbuild	sched: Make migrate_{en,dis}able() inline	2025-09-25 09:57:16 +02:00
Kconfig	io_uring: Rename KConfig to Kconfig	2025-02-19 14:53:27 -07:00
MAINTAINERS	soc: fixes for 6.18, part 4	2025-11-28 09:57:31 -08:00
Makefile	rust: kbuild: allow `unused_features`	2026-03-19 16:08:24 +01:00
README	README: Fix spelling	2024-03-18 03:36:32 -06:00

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the reStructuredText markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.