[PULL] drm-misc-fixes

[Maxime Ripard <self@mripard.dev>]

[-- Attachment #1: Type: text/plain, Size: 3588 bytes --]

Hi Dave, Simona,

Here's the drm-misc-fixes PR for this week

Maxime

drm-misc-fixes-2026-10-01:
Multiple patches for vc4 that improve memory safety and leaks, one error
handling fix and a wrongful cast fix for th1520-dw-hdmi, one input
validation fix and the blend mode property addition for vmwgfx, two
locking fixes for drm_bridge, an input validation fix for panthor, an
error handling fix for drm_dp_helper, EAGAIN handling fix for
drm_fb_helper, and a clock reference leakage fix for aspeed.
The following changes since commit 45585c3aa285854face65293acc95eff73063d6d:

  drm/imagination: clamp freelist reconstruction requests (2026-09-24 14:59:22 +0530)

are available in the Git repository at:

  https://gitlab.freedesktop.org/drm/misc/kernel.git tags/drm-misc-fixes-2026-10-01

for you to fetch changes up to bca45af5998a05f34b13a2ef11e639bac9c62643:

  drm/vc4: Use kvmalloc_objs() for the BO cache size list (2026-10-01 10:36:09 -0300)

----------------------------------------------------------------
Multiple patches for vc4 that improve memory safety and leaks, one error
handling fix and a wrongful cast fix for th1520-dw-hdmi, one input
validation fix and the blend mode property addition for vmwgfx, two
locking fixes for drm_bridge, an input validation fix for panthor, an
error handling fix for drm_dp_helper, EAGAIN handling fix for
drm_fb_helper, and a clock reference leakage fix for aspeed.

----------------------------------------------------------------
Cristian Ciocaltea (2):
      drm/bridge: Fix unlocked list_del in drm_bridge_add()
      drm/bridge: Fix unlocked list access in drm_bridge_attach()

Dave Airlie (1):
      nouveau: check gsp->rm as well as gsp pointer before gcx ready

Fan Wu (1):
      drm/vc4: drain the hangcheck timer and works on V3D unbind

Felix Gu (2):
      drm/bridge: th1520-dw-hdmi: Fix error check on dw_hdmi_probe() return value
      drm/bridge: th1520-dw-hdmi: Fix remove() callback

Ian Forbes (1):
      drm/vmwgfx: Add blend mode property

Maíra Canal (2):
      drm/vc4: Free the BO cache size list on teardown
      drm/vc4: Use kvmalloc_objs() for the BO cache size list

Myeonghun Pak (1):
      drm/aspeed: Balance the display clock enable on teardown

Nguyen Ngoc Thang (1):
      drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN

Oleg Keri (1):
      drm/dp: don't mark the AUX backlight enabled when enabling failed

Osama Abdelkader (1):
      drm/panthor: validate userspace queue count against initialized firmware slot count

Wentao Liang (1):
      drm/vc4: Fix firmware reference leak in vc4_drm_bind()

Zack Rusin (1):
      drm/vmwgfx: validate pitch coming from userspace

 drivers/gpu/drm/aspeed/aspeed_gfx_drv.c           |  5 ++---
 drivers/gpu/drm/bridge/th1520-dw-hdmi.c           |  8 +++----
 drivers/gpu/drm/display/drm_dp_helper.c           |  4 +++-
 drivers/gpu/drm/drm_bridge.c                      |  8 +++++--
 drivers/gpu/drm/drm_fb_helper.c                   |  6 +++---
 drivers/gpu/drm/nouveau/nvkm/engine/device/user.c |  2 +-
 drivers/gpu/drm/panthor/panthor_sched.c           |  3 +++
 drivers/gpu/drm/vc4/vc4_bo.c                      |  5 +++--
 drivers/gpu/drm/vc4/vc4_drv.c                     |  5 ++++-
 drivers/gpu/drm/vc4/vc4_v3d.c                     |  8 +++++++
 drivers/gpu/drm/vmwgfx/vmwgfx_cursor_plane.c      | 26 ++++++++++++++++++-----
 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c               |  8 +++++++
 12 files changed, 66 insertions(+), 22 deletions(-)

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 273 bytes --]