Re: [PATCH] drm/ioc32: stop speculation on the drm_compat_ioctl path

[Greg Kroah-Hartman]

On Thu, Apr 02, 2026 at 08:20:27AM +0200, Thomas Zimmermann wrote:
> 
> 
> Am 24.03.26 um 17:42 schrieb Greg Kroah-Hartman:
> > The drm compat ioctl path takes a user controlled pointer, and then
> > dereferences it into a table of function pointers, the signature method
> > of spectre problems.  Fix this up by calling array_index_nospec() on the
> > index to the function pointer list.
> > 
> > Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
> > Cc: Maxime Ripard <mripard@xxxxxxxxxx>
> > Cc: Thomas Zimmermann <tzimmermann@xxxxxxx>
> > Cc: David Airlie <airlied@xxxxxxxxx>
> > Cc: Simona Vetter <simona@xxxxxxxx>
> > Cc: stable <stable@xxxxxxxxxx>
> > Assisted-by: gkh_clanker_2000
> > Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
> 
> Also acked by Sima and Maxime via IRC
> 
> https://people.freedesktop.org/~cbrill/dri-log/?channel=dri-devel&highlight_names=&date=2026-04-01&show_html=true
> 
> Acked-by: Maxime Ripard <mripard@xxxxxxxxxx>
> Reviewed-by: Simona Vetter <simona@xxxxxxxx>

Great, thanks, I'm assuming some drm developer can pick this up then?

greg k-h