qiurui/Centos-kernel-stream-10
1
0
Fork 0
mirror of https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-10.git synced 2026-09-09 00:07:04 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
cf47d0d0a6994899d68bd8b2c9c7f4affae4eaf9
Centos-kernel-stream-10/drivers
T
History
CKI Backport Bot 0260fac7c9 RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path 
JIRA: https://redhat.atlassian.net/browse/RHEL-179960
CVE: CVE-2026-46189
Backported from tree(s): linux

commit e38e86995df27f1f854063dab1f0c6a513db3faf
Author: Jason Gunthorpe <jgg@nvidia.com>
Date:   Tue Apr 28 13:17:43 2026 -0300

    RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

    Sashiko points out that pvrdma_uar_free() is already called within
    pvrdma_dealloc_ucontext(), so calling it before triggers a double free.

    Cc: stable@vger.kernel.org
    Fixes: 29c8d9eba5 ("IB: Add vmw_pvrdma driver")
    Link: https://sashiko.dev/#/patchset/0-v1-e911b76a94d1%2B65d95-rdma_udata_rep_jgg%40nvidia.com?part=4
    Link: https://patch.msgid.link/r/10-v1-41f3135e5565+9d2-rdma_ai_fixes1_jgg@nvidia.com
    Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>

Signed-off-by: CKI Backport Bot <cki-ci-bot+cki-gitlab-backport-bot@redhat.com>
2026-09-02 19:06:39 +05:30
..
accel
Merge: Backport AMD XDNA NPU driver from Linux 7.0.14
2026-08-23 18:51:05 +00:00
accessibility
…
acpi
Merge: i3c: master: v6.19 sync and ACPI support
2026-09-01 07:27:23 +00:00
amba
…
android
…
ata
…
atm
…
auxdisplay
…
base
Merge: ALSA - update drivers for 10.3 - upstream 7.1.5 (stable)
2026-08-14 18:58:53 +00:00
bcma
…
block
…
bluetooth
…
bus
…
cache
…
cdrom
…
cdx
…
char
Merge: firmware: arm_ffa: driver update to v7.2
2026-08-23 18:50:46 +00:00
clk
…
clocksource
…
comedi
…
connector
…
counter
…
cpufreq
Merge: cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF()
2026-08-11 13:37:39 +00:00
cpuidle
Reapply "cpuidle: menu: Avoid discarding useful information"
2026-08-10 15:04:51 -05:00
crypto
Merge: Recent upstream fixes for DMA engine drivers
2026-08-18 10:04:20 +00:00
cxl
drivers,cxl: use node-notifier instead of memory-notifier
2026-07-31 14:50:22 -04:00
dax
…
dca
…
devfreq
…
dibs
…
dio
…
dma
Merge: Recent upstream fixes for DMA engine drivers
2026-08-18 10:04:20 +00:00
dma-buf
dma-fence: Silence sparse warning in dma_fence_describe
2026-08-18 11:01:57 +02:00
dpll
Merge: DPLL: Add support for NCO (numerically controlled oscillator)
2026-08-13 08:29:46 +00:00
edac
…
eisa
…
extcon
…
firewire
…
firmware
Merge: firmware: arm_ffa: driver update to v7.2
2026-08-23 18:50:46 +00:00
fpga
…
fsi
…
fwctl
…
gnss
…
gpio
Merge: Enable DWAPB GPIO controller on Fujitsu MONAKA
2026-08-13 08:29:34 +00:00
gpu
Merge: [RHEL-10.3] Recent upstream fixes for IOMMU subsystem
2026-08-21 09:19:28 +00:00
greybus
…
hid
Merge: [RHEL 10.3]: rebase HID subsystem to 7.1
2026-08-14 18:58:51 +00:00
hsi
…
hte
…
hv
Drivers: hv: vmbus: Provide option to skip VMBus unload on panic
2026-08-18 11:01:53 +02:00
hwmon
Merge: [RHEL 10.4] hwmon: (k10temp) Add per-CCD temperature monitoring for Zen5 Turin
2026-09-01 07:27:27 +00:00
hwspinlock
…
hwtracing
…
i2c
Merge: Enable DWAPB I2C controller on Fujitsu MONAKA
2026-08-13 08:29:37 +00:00
i3c
i3c: dw-i3c-master: Add ACPI ID for Tegra410
2026-08-14 09:47:06 -04:00
idle
Merge: intel_idle: Add Panther Lake C-states table
2026-07-29 20:28:06 +00:00
iio
iio: event: Fix event FIFO reset race
2026-08-03 09:53:08 +00:00
infiniband
RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
2026-09-02 19:06:39 +05:30
input
Merge: CVE-2026-64276: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
2026-08-23 18:50:59 +00:00
interconnect
…
iommu
Merge: [RHEL-10.3] Recent upstream fixes for IOMMU subsystem
2026-08-21 09:19:28 +00:00
ipack
…
irqchip
…
isdn
…
leds
…
macintosh
…
mailbox
…
mcb
…
md
dm cache policy smq: check allocation under invalidate lock
2026-08-13 19:04:08 -04:00
media
media: platform: amd: add DRM_AMDGPU dependency
2026-08-07 16:13:41 +08:00
memory
…
memstick
…
message
…
mfd
Merge: ALSA - update drivers for 10.3 - upstream 7.1.5 (stable)
2026-08-14 18:58:53 +00:00
misc
Merge: mei: bus: access mei_device under device_lock on cleanup
2026-08-11 13:38:06 +00:00
mmc
…
most
…
mtd
…
mux
…
net
Merge: net: Fix deadlock on netns change.
2026-08-23 18:51:08 +00:00
nfc
…
ntb
…
nubus
…
nvdimm
…
nvme
Merge: CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
2026-08-05 09:09:15 +00:00
nvmem
…
of
…
opp
…
parisc
…
parport
…
pci
Merge: Merge branch 'pci/resource'
2026-08-06 11:46:40 +00:00
pcmcia
…
peci
…
perf
Merge: perf/arm_pmu: Skip PMCCNTR_EL0 on NVIDIA Olympus
2026-08-14 18:59:03 +00:00
phy
…
pinctrl
Merge: pinctrl-amd: Don't clear S4 wake bits at probe
2026-08-11 13:37:58 +00:00
platform
Merge: platform/x86/intel/tpmi: Add notifiers support and move debugfs register before creating devices
2026-08-11 13:37:51 +00:00
pmdomain
…
pnp
…
power
…
powercap
…
pps
…
ps3
…
ptp
…
pwm
…
rapidio
…
ras
…
regulator
…
remoteproc
…
resctrl
arm_mpam: guard MBWU state before adding it to garbage
2026-08-06 15:41:00 -05:00
reset
…
rpmsg
…
rtc
…
s390
Merge: Rebase KVM to upstream kernel 7.0
2026-07-30 20:35:56 +00:00
sbus
…
scsi
scsi: smartpqi: Update version to 2.1.42-011
2026-08-11 10:29:54 -05:00
sh
…
siox
…
slimbus
…
soc
soc/tegra: fuse: Fix spurious straps warning on SMCCC platforms
2026-07-29 10:01:36 -04:00
soundwire
soundwire: intel_ace2x: release bpt_stream when close it
2026-07-29 10:44:41 +02:00
spi
…
spmi
…
ssb
…
staging
Merge: [RHEL 10.3]: rebase HID subsystem to 7.1
2026-08-14 18:58:51 +00:00
target
scsi: target: Fix hexadecimal CHAP_I handling
2026-08-12 12:41:35 +02:00
tc
…
tee
…
thermal
Merge: thermal: core: Fix thermal zone device registration error path
2026-08-14 18:59:05 +00:00
thunderbolt
…
tty
Merge: Rebase KVM to upstream kernel 7.0
2026-07-30 20:35:56 +00:00
ufs
…
uio
…
usb
Merge: CVE-2026-53195 / CVE-2026-53196: USB: serial: io_ti: fix heap overflow attacks
2026-08-20 09:14:48 +00:00
vdpa
…
vfio
…
vhost
vhost: reset the vring metadata cache on vring reconfiguration
2026-08-05 13:42:57 +00:00
video
…
virt
drivers/virt: pkvm: Add Kconfig dependency on DMA_RESTRICTED_POOL
2026-08-18 14:39:13 +02:00
virtio
mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize()
2026-07-31 14:50:27 -04:00
w1
…
watchdog
…
xen
Merge: xen: buffer overflow in drivers/xen/sys-hypervisor.c
2026-08-20 09:14:38 +00:00
zorro
…
Kconfig
…
Makefile
…