On Mon, Jun 22, 2026 at 04:25:39PM +0300, Joonas Lahtinen wrote: > Add missing Spectre mitigation for userspace controlled parallel > submission slot. > > Discovered using AI-assisted static analysis confirmed by Intel > Product Security. > > Reported-by: Martin Hodo <[email protected]> > Fixes: e5e32171a2cf ("drm/i915/guc: Connect UAPI to GuC multi-lrc interface") > Cc: Matthew Brost <[email protected]>
Reviewed-by: Matthew Brost <[email protected]> > Cc: Tvrtko Ursulin <[email protected]> > Signed-off-by: Joonas Lahtinen <[email protected]> > --- > drivers/gpu/drm/i915/gem/i915_gem_context.c | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/drivers/gpu/drm/i915/gem/i915_gem_context.c > b/drivers/gpu/drm/i915/gem/i915_gem_context.c > index 6ac0f23570f3..aeafe1742d30 100644 > --- a/drivers/gpu/drm/i915/gem/i915_gem_context.c > +++ b/drivers/gpu/drm/i915/gem/i915_gem_context.c > @@ -613,6 +613,7 @@ set_proto_ctx_engines_parallel_submit(struct > i915_user_extension __user *base, > return -EINVAL; > } > > + slot = array_index_nospec(slot, set->num_engines); > if (set->engines[slot].type != I915_GEM_ENGINE_TYPE_INVALID) { > drm_dbg(&i915->drm, > "Invalid placement[%d], already occupied\n", slot); > -- > 2.54.0 >
