In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
drm\/panthor: Add vm_bind region with kbo range overlap check<\/p>\n
When a VM is created, caller has to specify the range of the address space
\ncarve-out set aside for mapping kernel BO’s. That means vm_bind mappings of
\nUM-exposed BO’s should not intersect with that region, but at the moment
\nwe’re not checking this.<\/p>\n
At first, I thought of giving these values to drm_gpuvm_init() through its
\nreserve_{offset, range} arguments, but it turns out that is meant for VM
\naddress spans that are not managed through the usual drm_gpuvm split\/merge
\ncircuit, so storing the end of the user VA range at VM creation time and
\ndoing a quick check in the vm_bind ioctl path was the simplest workaround.<\/p>\n
The new check also makes sure vm_bind range doesn’t overflow the size of a
\n64-bit unsigned integer. That was already being done further down the call
\nstack inside drm_gpuvm_sm_map -> drm_gpuvm_range_valid, but it’s best to
\nfail early in the driver before GPUVM functions are invoked so that we
\nwon’t waste time allocating vm_bind context resources.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
drm\/panthor: Add vm_bind region with kbo range overlap check<\/p>\n
When a VM is created, caller has to specify the range of the address <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25818","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25818","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25818"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25818"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25818"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}