Re: [PATCH v2] drm/i915/gem: Fix UAF race in eb_relocate_vma

[Rodrigo Vivi <rodrigo.vivi@intel.com>]

On Wed, Mar 25, 2026 at 01:30:52PM -0400, Yassine Mounir wrote:
>    "Hi Rodrigo, I've submitted the issue and the V2 patch under #15882. I've    
>    marked it as confidential as it addresses a potential UAF security risk.     
>    Looking forward to your review."                                             

Could you please share a URL for that. I could not find it.

>    On Wed, 25 Mar 2026 at 13:30, Yassine Mounir <[1]sosohero200@gmail.com>      
>    wrote:                                                                       
>                                                                                 
>    >> "Hi Rodrigo,                                                              
>                                                                                 
>    >> I am currently following your instructions to file the bug report on      
>    >> GitLab. However, my new GitLab account is pending manual approval due     
>    >> to the current spam restrictions on [2]freedesktop.org. I have            
>    >> contacted the admins for full permissions.                                
>                                                                                 
>    >> In the meantime, I have prepared all the logs (KASAN splat from vanilla   
>    >> drm-tip and the clean dmesg from the patched version). As soon as the     
>    >> account is active, I will post the link here.                             
>                                                                                 
>    >> Thank you for your patience."                                             
>                                                                                 
>    > On Wed, 25 Mar 2026 at 11:47, Rodrigo Vivi <[3]rodrigo.vivi@intel.com>     
>    > wrote:                                                                     
>                                                                                 
>    >> On Wed, Mar 25, 2026 at 04:07:17PM +0200, Joonas Lahtinen wrote:          
>    >> > Quoting Yassine Mounir (2026-03-25 10:20:58)                            
>    >> > > Hi Joonas,                                                            
>    >> > > Thank you for the detailed feedback. I apologize for the double tag   
>    >> and the                                                                   
>    >> > > direct submission to Greg; I'm still refining my workflow.            
>    >> >                                                                         
>    >> > Ok, then to level set some expectations:                                
>    >> >                                                                         
>    >> > Have you actually confirmed that the code you have submitted compiles   
>    >> > and does fix the bug you reported?                                      
>    >> >                                                                         
>    >> > Expectation is that you run the reproducer on top of drm-tip and see    
>    >> a                                                                         
>    >> > crash where you pick the dmesg/KASAN splat from, then you run drm-tip   
>    >> > with the patch you have prepared and there is no crash.                 
>                                                                                 
>    >> Exactly.                                                                  
>                                                                                 
>    >> Before any further submission, please let's get back to square 0 here.    
>                                                                                 
>    >> 0. Please file a bug to our gilab/issues:                                 
>    >> [4]https://drm.pages.freedesktop.org/intel-docs/how-to-file-i915-bugs.html
>                                                                                 
>    >> Do that against the drm-tip branch and provide all the log information    
>    >> from your experiments.                                                    
>                                                                                 
>    >> 1. If you have a proposed patch, also please confirm that it actually     
>    >> fix                                                                       
>    >> the issues that you are solving.                                          
>                                                                                 
>    >> 2. Whenever using AI to help you with the code please ensure you comply   
>    >> with this:                                                                
>                                                                                 
>    >> Documentation/process/generated-content.rst                               
>                                                                                 
>    >> Thanks,                                                                   
>    >> Rodrigo.                                                                  
>                                                                                 
>    >> >                                                                         
>    >> > Regards, Joonas                                                         
> 
> References
> 
>    Visible links
>    1. mailto:sosohero200@gmail.com
>    2. http://freedesktop.org/
>    3. mailto:rodrigo.vivi@intel.com
>    4. https://drm.pages.freedesktop.org/intel-docs/how-to-file-i915-bugs.html