From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f49.google.com (mail-wm1-f49.google.com [209.85.128.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 01E57271A9A for ; Mon, 13 Jul 2026 17:30:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.49 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783963835; cv=none; b=S3Efvt/bmTMZQj4Izra4NLqkJhlNE4/Z92Pkg079J9I7EkUJYN8FpaV4T95TxqzjF83M7HMTa78mGwl5PTqJHiz/a5e2Lz1BiL70S61+hCAWAr3pl3zBSfJ9Omh/ORpeYKwDo1vbIGY70VBHo/VQue/or7vVjT35rpt7a6NPdY0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783963835; c=relaxed/simple; bh=hj1SaJ0AZCjEgBfcrHYpqrENkSKrOb29dfhyWhObNvU=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=ZWidPw9jLF95fWXtecPf+QEQfjgoWhLvHwFAfEwbuVRQ77srqQ4wCsdJozCg+vu8UHwZO4PDQh1vui8FeTMJPeVPbMX5FM3vOdHbN0sgh93q6XwzupG0MadpBpJH85kn5JYgk+rfJZHTClrG5z0LdH546kf6fg03PJUFekBZhQE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=0sec.ai; spf=pass smtp.mailfrom=0sec.ai; dkim=temperror (0-bit key) header.d=0sec.ai header.i=@0sec.ai header.b=Oj1eoVAg; arc=none smtp.client-ip=209.85.128.49 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=0sec.ai Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=0sec.ai Authentication-Results: smtp.subspace.kernel.org; dkim=temperror (0-bit key) header.d=0sec.ai header.i=@0sec.ai header.b="Oj1eoVAg" Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-493c52cde9eso30584245e9.3 for ; Mon, 13 Jul 2026 10:30:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=0sec.ai; s=google; t=1783963832; x=1784568632; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=lYut2P9aL0SG5+YzD0gog4SCKmU/B02j9PR7RohOFfE=; b=Oj1eoVAganmDtC06ttXBtqdo63fZABLbkzmBnmONvziiSaH7aDp2vWhY8kOHDS1Sjh 4nJz1NIlM//unUSx5NdWHONRUmyiPlRqysjSOxzy/oc2LsKHInbO2qvjhslMO0Hj47Ri n2Ujf6dzl7tBHOyVM9gFcs/Cb9PAY7ZtDi4q7g/8TyismhX0ox1r9Gt2n4cwoWNYEgvc eOmEsuIHmiq3M37YzeCGndYnAKuNugYplrVyxUn26yKhyNGAo81WlUdJR2TbwK+r5xB2 eUzZ2VythZj5J5LIQM0fG6Yj+uBxs5vgB/FpDXQUQqr5YBcgVSXiN9zOks8lzm4qZA0R TcpQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783963832; x=1784568632; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=lYut2P9aL0SG5+YzD0gog4SCKmU/B02j9PR7RohOFfE=; b=d3CMonGgzDOEdc+8OAZ2A4dW6KZ8EI8r2DeLFEvgL3KL5nuID8ULLteu1mXb6NA613 dEydTiIrxVHUIbPNhWmDK3ukLF8ugrxU7jk6c+yHbCo5XE2nXXG4mMO9HDChREWFl6BK 8jPNfT9qsLVvU8AJ+0GtDoF6jHOr80zNBJO2MnQ5FDHOpWP0Y/3koN6RBTTK1/C6l09g axYi6fmM93nM8xJajwaB1p3AAYaF0LE7tdD3M+ZxQYQGjEDisiYLFk26Z3wMHc3A8c9s cjhe/XicExZXTD4Hx2NGDqGfhmLZBGlaY2erEjdc6rls+Ut6z6jkC85XktDTQDgvNYY6 Ch0Q== X-Forwarded-Encrypted: i=1; AHgh+RpqDRbwqUTWmDckVIwiSZ0IIyFjfck0E3eJ09k2vSu58BchfjdVCzw8L224gi41LtdCyk2Bh6rG7S06T1M=@vger.kernel.org X-Gm-Message-State: AOJu0YyqQ1X+q7kpH9Hgnb5X2bl48EFnnmeeM15GM7oI7E6cit6ObxjP 8OJg9A02RZkZo+Dcron7bsDWOM/K3LXFoJLrM6nLSrhVi6mo1I20Za9GvvGu/FLxNEFP84vz3F+ SkfebN2gj X-Gm-Gg: AfdE7cmtBXtVjHw0RYY+PDkBMRpChiJ4zlCbrriN/3qAwzIW/sftVMMysporhhuVPGR NmchAuZZsfaBQnAqX20O0Ls20QdIgupxHgy5oaQvopLawlxO/LEPTTT6ad4aDidZP3K+Jhb+yiL dWkuXZvh2jAd0/h0Yu0/AepZTpSR8i87+urXOruCBuLBruh4J7Ii2HN+rZxNN9h3zRGvndSaPen PVtCHsUc7kSyWgl05zU7sBRUi6bY8UnpSqyT6fOjYEbzvBZwVPNy2Mw1yAwDj5FzP0ViVOrO7tW bfbqc//zMwiagmtIuSp4lX0sxxpfyXKoMXAfjwUxSr+X48iTqJYmlRRq4a6jjXE3EYsp2GGaX9s ySCq/u+ZW7EXg2LZuwIaU3syGiXW931ChD4kN+ZnDfd2drzNZ/+z5pqeDCiZJ3BqvdBiP0d6yzq 3eWY9LoucbdMN9tWUiPalP0BgWdyk598iG1yzJlxH9ol8n3g5KEx4jshUjHCoAR91q7JAC4BEuS 0CE5loudhkNS1VGmGA3C2ZYzPVW+CoyPo8= X-Received: by 2002:a05:600c:6048:b0:493:e97d:97e3 with SMTP id 5b1f17b1804b1-493f883e9aamr78602105e9.39.1783963832090; Mon, 13 Jul 2026 10:30:32 -0700 (PDT) Received: from PeakBook-Mini.tail8e484.ts.net ([178.197.218.188]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-493f3a60404sm260075855e9.1.2026.07.13.10.30.31 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Mon, 13 Jul 2026 10:30:31 -0700 (PDT) From: Doruk Tan Ozturk To: Min Ma , Lizhi Hou , Oded Gabbay Cc: dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, Doruk Tan Ozturk Subject: [PATCH 0/2] accel/amdxdna: fix two NULL-deref DoS paths reachable via AMDXDNA_EXEC_CMD Date: Mon, 13 Jul 2026 19:30:27 +0200 Message-ID: <20260713173030.87541-1-doruk@0sec.ai> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit An unprivileged process with access to an AMD NPU accel node can oops the kernel with a single AMDXDNA_EXEC_CMD ioctl. Two distinct NULL dereferences are reachable on the command-submit path, both since the driver first gained command execution: 1. cmd_handles = 0 (AMDXDNA_INVALID_BO_HANDLE) leaves job->cmd_bo NULL, dereferenced later by the DRM scheduler. 2. On an AIE4 device (no .cmd_submit op) the ioctl calls a NULL function pointer. Both are availability-only (local DoS), no memory corruption. Found by static analysis; verified against source, not runtime-reproduced (no NPU on hand). Doruk Tan Ozturk (2): accel/amdxdna: reject user command submission without a command BO accel/amdxdna: reject command submission on devices without a submit op drivers/accel/amdxdna/amdxdna_ctx.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) -- 2.43.0