CVE-2025-38409: drm/msm: Fix another leak in the submit error path · Pull Request !17586 · openEuler/kernel

fix CVE-2025-38409
issue link: https://gitee.com/src-openeuler/kernel/issues/ICOXCV

commit 9c537615fe7c475211407ef60d3d6e9fdde58c07 (HEAD -> CVE-2025-38409, origin/CVE-2025-38409)
Author: Rob Clark <robdclark@chromium.org>
Date:   Wed May 14 09:33:33 2025 -0700

drm/msm: Fix another leak in the submit error path

stable inclusion
    from stable-v6.6.97
    commit c40ad1c04d306f7fde26337fdcf8a5979657d93f
    category: bugfix
    bugzilla:https://gitee.com/src-openeuler/kernel/issues/ICOXCV
    CVE: CVE-2025-38409

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/patch/?id=c40ad1c04d306f7fde26337fdcf8a5979657d93f

--------------------------------

[ Upstream commit f681c2aa8676a890eacc84044717ab0fd26e058f ]

put_unused_fd() doesn't free the installed file, if we've already done
    fd_install().  So we need to also free the sync_file.

Signed-off-by: Rob Clark <robdclark@chromium.org>
    Patchwork: https://patchwork.freedesktop.org/patch/653583/
    Signed-off-by: Rob Clark <robin.clark@oss.qualcomm.com>
    Signed-off-by: Sasha Levin <sashal@kernel.org>
    Signed-off-by: anhuiwangdafeng <wangdafeng@inspur.com>

GVPopenEuler/kernel

搜索帮助

GVP openEuler/kernel