Ian Forbes 32b415a9dc drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE ... This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access. Fixes: 8ce75f8ab9 ("drm/vmwgfx: Update device includes for DX device functionality") Reported-by: Rohit Keshri <rkeshri@redhat.com> Signed-off-by: Ian Forbes <ian.forbes@broadcom.com> Reviewed-by: Maaz Mombasawala <maaz.mombasawala@broadcom.com> Signed-off-by: Zack Rusin <zack.rusin@broadcom.com> Link: https://patch.msgid.link/20251021190128.13014-1-ian.forbes@broadcom.com		2025-11-06 23:59:40 -05:00
..
drm	drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE	2025-11-06 23:59:40 -05:00
host1x	…
ipu-v3	…
nova-core	drm next for 6.18-rc1	2025-10-02 12:47:25 -07:00
trace	…
vga	…
Makefile	…