[PATCH] drm/i9i5/gt: Fix a double free in gen8_preallocate_top_level_pdp

ectory's slab bucket") Signed-off-by: Lv Yunlong --- drivers/gpu/drm/i915/gt/gen8_ppgtt.c | 1 - 1 file changed, 1 deletion(-) diff --git a/drivers/gpu/drm/i915/gt/gen8_ppgtt.c b/drivers/gpu/drm/i915/gt/gen8_ppgtt.c index 755522ced60d..3ae16945bd43 100644 --- a/drivers/gpu/drm/i915/gt/gen8_ppgt

[PATCH v2] video: hyperv_fb: Fix a double free in hvfb_probe

set info->apertures to NULL. It is because that let framebuffer_release() handle freeing the memory flows the fbdev pattern, and less code overall. Signed-off-by: Lv Yunlong --- drivers/video/fbdev/hyperv_fb.c | 3 --- 1 file changed, 3 deletions(-) diff --git a/drivers/video/fbdev/hyperv_fb

[PATCH] video/fbdev: Fix a double free in hvfb_probe

uble free. Signed-off-by: Lv Yunlong --- drivers/video/fbdev/hyperv_fb.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/video/fbdev/hyperv_fb.c b/drivers/video/fbdev/hyperv_fb.c index c8b0ae676809..2fc9b507e73a 100644 --- a/drivers/video/fbdev/hyperv_fb.c +++ b/drivers/vi

[PATCH] gpu/xen: Fix a use after free in xen_drm_drv_init

calls xen_drm_drv_fini(front_info) cause a use after free by drm_info = front_info->drm_info statement. My patch has done two things. First fixes the fail label which drm_info = kzalloc() failed and still free the drm_info. Second sets front_info->drm_info to NULL to avoid uaf. Signed-off-by