Re: [PATCH] drm/amd/display: Fix slab-use-after-free in hdcp

2025-04-22 Thread Alex Hung
Reviewed-by: Alex Hung On 4/17/25 15:50, Mario Limonciello wrote: From: Chris Bainbridge The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector objects without incrementing the kref reference counts. When using a USB-C dock, and the dock is unplugged, the corresponding amdgp

[PATCH] drm/amd/display: Fix slab-use-after-free in hdcp

2025-04-17 Thread Mario Limonciello
From: Chris Bainbridge The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector objects without incrementing the kref reference counts. When using a USB-C dock, and the dock is unplugged, the corresponding amdgpu_dm_connector objects are freed, creating dangling pointers in the HD