Dave,
Two important fixes for vmwgfx.
The off-by-one fix could cause a malicious user to potentially crash the
kernel.
The framebuffer map cache fix can under some circumstances enable a user to
read from or write to freed pages.
The following changes since commit b0bb222440a5c8273f67dd37946707e6ba6ad832:
Merge branch 'linux-4.15' of git://github.com/skeggsb/linux into drm-fixes (2018-01-09 12:03:10 +1000)
are available in the git repository at:
git://people.freedesktop.org/~thomash/linux vmwgfx-fixes-4.15
for you to fetch changes up to 0d9cac0ca0429830c40fe1a4e50e60f6221fd7b6:
drm/vmwgfx: Potential off by one in vmw_view_add() (2018-01-10 15:21:39 +0100)
----------------------------------------------------------------
Dan Carpenter (1):
drm/vmwgfx: Potential off by one in vmw_view_add()
Thomas Hellstrom (1):
drm/vmwgfx: Don't cache framebuffer maps
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 ++
drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 6 -----
drivers/gpu/drm/vmwgfx/vmwgfx_kms.h | 2 +-
drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c | 41 ++++++++++-----------------------
4 files changed, 15 insertions(+), 36 deletions(-)
_______________________________________________
dri-devel mailing list
dri-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.freedesktop.org/mailman/listinfo/dri-devel
