From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 93B99313E38 for ; Sun, 9 Aug 2026 05:13:00 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.177 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786252381; cv=none; b=U1Etmx+05Ar6xHVGxz7BkacgKTykJloIpjCaUIOBvX92MSJYjzAX5amj884Za/y2bw83z3UmJToVld/+UCCFqboKR+gezykJU9NC7ptbzG/51/FtKN5gbHdnnWAg1SKAmXpZyyqXGVARIGBpLvvvfhmORtHwzGc4wu1RMaiwNO8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786252381; c=relaxed/simple; bh=NgoYVohPHC91L+XJda2LfD3WdV01q8BGP3IxQbBmXi4=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=ABl9Mpo3LE8cb/vXDHtOJXNlL/4um822aTp3FYJfS0uB53GNkxoCRGIIaJA6e3rrfBiN5hEbxR/CJndgvVCklBcYfnrublDLAOq7MwC7yST5vWzxY+lvq0Isv9jEZEViBw38bpa5n32tLv4mkXnhiyrivQOtAJEySJ8RhD4YziQ= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=g6iscqjl; arc=none smtp.client-ip=209.85.214.177 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="g6iscqjl" Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-2d0407aedd6so9064615ad.0 for ; Sat, 08 Aug 2026 22:13:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1786252379; x=1786857179; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=7uC67/V7nwNWq+dWDB8FGNBrrM/47Cbt+1oF506R3e8=; b=g6iscqjl+bzs4KSnI5Ssv+v+gP3k8wgSztYcDfFCOYDHf6Kw99NjIqNavHBs59WL+t QLABVUZMvGa6Tkejnlao+1mQGybvnI1GivdQY3QN866D3YvT5d3NVdERQWKQyUabHCn1 7ms5lZcD235LWb2QDAcZG0Xm37DocekaBMAgNjiwrtTTuCcYqWKR4+vdZlkJ02db5g41 DR9hFpPS3cny7j0OthSskbh1RV47z8fR/HlEfPqssg9j318pQqHfkGLnzTCQTz7HGUdk IQXJY3JAWOsn31pUVy5/79Y5JqR459UagnrxTX/0JcJD0BGAWUutEXfe08VAmiWP9JBx /mQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786252379; x=1786857179; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=7uC67/V7nwNWq+dWDB8FGNBrrM/47Cbt+1oF506R3e8=; b=sCR7ExIwVabDerwoNTj+tXN5tCQD6Z7WoCVsZAB6AHwlXBY3jELWkQQECC1tHywCtK vp3RXZVUoigDh800isaMKi8mKJHAF5p4F+hyD2lG4ZcBw5pfcgxqAYojwrnTaGnAnLXn iILtrhQ3RFU+AKbwUVHD5JxD5W+3qZSP+IEFm01skTsAMZylHVgzzPnv30AQ0pAob3pA sKdmukxkiOnu5bnbxgSnpGIK+qz0Roap/Niz5Dn8yozP7YbYZZlkbF2JsW2G4U5XWkE4 6Yg7GXJSRrzJG6gGPNYOr9t1GCHfMSAMTtFmqsxw+Con51vknyuUsTleb+qJtTc6bVSk YGRg== X-Forwarded-Encrypted: i=1; AHgh+RqBcFDvEdGBDyMsXVWLSxA3HHgjPIQ2HECneWY5QCQKzmUZLUL7/FsLAxvuSHYsuJm2S2x26+pCb5jFSv8=@vger.kernel.org X-Gm-Message-State: AOJu0Yx1NUTxs+nPHbXCjqq7F1Y3C+SMiiGWZfC4wXVTC6NOYryfQ7oN 4N+INXUq3RFf8TJkTv7+wz4e1NO8a8Z243+KaUNHxktjQnDaSSlITIbW X-Gm-Gg: AR+sD11rCLAA6c+/8n29i+7p8YsGkupKNA80AVjc5YcmA6aIqcg/LRgzcHCUSWZyMJx jBnNttk2ULVtF6IhuORZ706XmvblVC4VBaLUqKL6dH44ub3Puz86TsZz61iPbQtfdjqHCRS5isK kbEQE1qwdDyc6fI54wZw3xHIL84e31pTaqDnxBOv6gSFFIX6nmuvkJDWMwIliGmpxhVHZjK0w49 ywOERDMDvTMMmDXkltx/xu2aAG4G5wwFe1I11ZeblXEdDjS2douZPuulOu4OP1CKhN7K3eKIvF0 fo3WJFfpM61vC3ppJ9mO7VvN6VKLmpfgeK4ry7vaR7bx1+rT88cQR+VO8zLE7e3Xn1Cw3mk6mSZ h5riZyz04oAz2WBSJdcESjTLFw5mqGCp3YQ8z3/iMe1ZU2lQjBG4hx8UEqOJmZH00msT4+ZdCvY vuAL+XpdWSG/HZDC87fkKN4uVY76l36XkyiojeO8kh35Envopfy57NdEXX3lBez4ufXoz32yXNH gdkCFxwyGkZdxNbw/unz2Sl X-Received: by 2002:a17:903:3848:b0:2c9:c991:3bf0 with SMTP id d9443c01a7336-2d0ca70da11mr418477765ad.8.1786252379391; Sat, 08 Aug 2026 22:12:59 -0700 (PDT) Received: from localhost.localdomain ([103.178.204.108]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-315be8a7395sm27095702eec.9.2026.08.08.22.12.56 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 08 Aug 2026 22:12:58 -0700 (PDT) From: Sreeraj S Kurup To: alexander.deucher@amd.com, christian.koenig@amd.com Cc: amd-gfx@lists.freedesktop.org, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, airlied@gmail.com, simona@ffwll.ch, Sreeraj S Kurup Subject: [PATCH v3 0/6] drm/amdgpu: Robustness and safety fixes for ACA and RAS drivers Date: Sun, 9 Aug 2026 05:11:54 +0000 Message-ID: <20260809051200.3276-1-sreekuttan2156239@gmail.com> X-Mailer: git-send-email 2.54.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit This patch series addresses several race conditions, boundary check bugs, logic inversions, NULL pointer checks, and buffer size parameters across the AMDGPU ACA (Accelerated Compute Architecture) and RAS driver subsystems. v2 -> v3: - Patch 3: Updated amdgpu_aca_get_error_data() to return 0 instead of -EOPNOTSUPP for invalid handles, ensuring global RAS error queries safely pass through non-ACA blocks without breaking telemetry. - Patch 6: Moved cancel_delayed_work_sync() in amdgpu_ras_fini() prior to ACA subsystem and lock cleanup to avoid teardown races and UAF. v1 -> v2: - Patch 3: Updated remove_aca_handle() to use list_del_init() instead of list_del(), ensuring list_empty() properly evaluates removed handles and avoiding potential UAF during device teardown. Sreeraj S Kurup (6): drm/amdgpu/aca: Fix race condition and UAF in error cache logging drm/amdgpu/aca: Add upper bounds check in aca_bank_hwip_is_matched drm/amdgpu/aca: Fix inverted validation logic and list cleanup drm/amdgpu/aca: Add missing NULL check for banks parameter in aca_banks_add_bank drm/amdgpu/aca: Fix off-by-one buffer size parameter in add_aca_sysfs drm/amdgpu/ras: Cancel delayed work before ACA teardown in amdgpu_ras_fini drivers/gpu/drm/amd/amdgpu/amdgpu_aca.c | 35 ++++++++++--------------- drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 3 +-- 2 files changed, 15 insertions(+), 23 deletions(-) -- 2.54.0