Re: [Intel-gfx] [PATCH] drm/i915: Fix vm use-after-free in vma destruction

Hi, Andi On 5/19/22 23:46, Andi Shyti wrote: Hi Thomas, On Thu, May 12, 2022 at 11:40:45AM +0200, Thomas Hellström wrote: In vma destruction, the following race may occur: Thread 1: Thread 2: i915_vma_destroy(); ... list_del_init(vma->vm_link); ...

Re: [Intel-gfx] [PATCH] drm/i915: Fix vm use-after-free in vma destruction

Hi Thomas, On Thu, May 12, 2022 at 11:40:45AM +0200, Thomas Hellström wrote: > In vma destruction, the following race may occur: > > Thread 1: Thread 2: > i915_vma_destroy(); > > ... > list_del_init(vma->vm_link); > ... > mutex_unlock(vma->vm->mutex); >

[PATCH] drm/i915: Fix vm use-after-free in vma destruction

In vma destruction, the following race may occur: Thread 1: Thread 2: i915_vma_destroy(); ... list_del_init(vma->vm_link); ... mutex_unlock(vma->vm->mutex); __i915_vm_release(); release_references(); And in release_reference() we