Displaying 1 result from an estimated 1 matches for "f64122c1f6ad".
2020 Apr 29
0
[PATCH] drm/qxl: qxl_release use after free
...shes in qxl driver or trigger memory corruption
> in some kmalloc-192 slab object
>
> Gerd Hoffmann proposes to swap the qxl_release_fence_buffer_objects() +
> qxl_push_{cursor,command}_ring_release() calls to close that race window.
>
> cc: stable at vger.kernel.org
> Fixes: f64122c1f6ad ("drm: add new QXL driver. (v1.4)")
> Signed-off-by: Vasily Averin <vvs at virtuozzo.com>
Pushed to drm-misc-fixes.
thanks,
Gerd