drm/xe/migrate: prevent potential UAF
authorMatthew Auld <matthew.auld@intel.com>
Thu, 31 Jul 2025 09:38:11 +0000 (10:38 +0100)
committerRodrigo Vivi <rodrigo.vivi@intel.com>
Tue, 12 Aug 2025 16:52:26 +0000 (12:52 -0400)
commit145832fbdd17b1d77ffd6cdd1642259e101d1b7e
tree9053782d81202832470a0602c0a56080a420f85c
parent4126cb327a2e3273c81fcef1c594c5b7b645c44c
drm/xe/migrate: prevent potential UAF

If we hit the error path, the previous fence (if there is one) has
already been put() prior to this, so doing a fence_wait could lead to
UAF. Tweak the flow to do to the put() until after we do the wait.

Fixes: 270172f64b11 ("drm/xe: Update xe_ttm_access_memory to use GPU for non-visible access")
Signed-off-by: Matthew Auld <matthew.auld@intel.com>
Cc: Maciej Patelczyk <maciej.patelczyk@intel.com>
Cc: Matthew Brost <matthew.brost@intel.com>
Reviewed-by: Stuart Summers <stuart.summers@intel.com>
Link: https://lore.kernel.org/r/20250731093807.207572-8-matthew.auld@intel.com
(cherry picked from commit 9b7ca35ed28fe5fad86e9d9c24ebd1271e4c9c3e)
Signed-off-by: Rodrigo Vivi <rodrigo.vivi@intel.com>
drivers/gpu/drm/xe/xe_migrate.c