Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Matthew Wilcox (Oracle) adca36b731 idr: fix idr_alloc() returning an ID out of range ... commit c6e8e595a0 upstream. If you use an IDR with a non-zero base, and specify a range that lies entirely below the base, 'max - base' becomes very large and idr_get_free() can return an ID that lies outside of the requested range. Link: https://lkml.kernel.org/r/20251128161853.3200058-1-willy@infradead.org Fixes: 6ce711f275 ("idr: Make 1-based IDRs more efficient") Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reported-by: Jan Sokolowski <jan.sokolowski@intel.com> Reported-by: Koen Koning <koen.koning@intel.com> Reported-by: Peter Senna Tschudin <peter.senna@linux.intel.com> Closes: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/6449 Reviewed-by: Christian König <christian.koenig@amd.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		History 2026-01-19 13:10:02 +01:00
..
fault-injection	docs: fault-injection: convert docs to ReST and rename to *.rst	2019-06-14 14:21:07 -06:00
ktest	ktest.pl: Fix uninitialized var in config-bisect.pl	2026-01-19 13:09:49 +01:00
kunit	kunit: tool: Import missing importlib.abc	2022-02-23 12:03:04 +01:00
nvdimm	tools/testing/nvdimm: Use per-DIMM device handle	2026-01-19 13:09:52 +01:00
radix-tree	idr: fix idr_alloc() returning an ID out of range	2026-01-19 13:10:02 +01:00
scatterlist	Merge branch 'akpm' (patches from Andrew)	2021-09-03 10:08:28 -07:00
selftests	selftests/ftrace: traceonoff_triggers: strip off names	2026-01-19 13:09:59 +01:00
vsock	vsock_diag_test: remove free_sock_stat() call in test_no_sockets	2021-10-15 17:21:34 -07:00