Re: [PATCH 0/2] iommu/vt-d: Fix issues on probe error path
From: Baolu Lu
Date: Mon Jun 01 2026 - 03:13:44 EST
On 6/1/26 01:02, Pranjal Shrivastava wrote:
This series addresses two pre-existing issues in the Intel VT-d driver's
probe error path. These issues were identified by Sashiko during the
review of the ATS series [1].
The first patch fixes an RB-tree corruption that occurs when probing
non-ATS devices. The second patch fixes a UAF by ensuring the per-device
private data pointer is cleared before freeing memory on failure.
[1]https://sashiko.dev/#/patchset/20260525184347.4059549-1- praan@xxxxxxxxxx?part=4
v2
- Updated the Fixes tag for Patch 2 based on feedback from Lu.
Thanks,
Praan
Pranjal Shrivastava (2):
iommu/vt-d: Fix RB-tree corruption in probe error path
iommu/vt-d: Fix Use-After-Free in probe error path
drivers/iommu/intel/iommu.c | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
Queued these two fix patches for linux-next.
I noticed that Sashiko reported two pre-existing issues here:
https://sashiko.dev/#/patchset/20260531170254.60493-1-praan%40google.com
I will follow up with fixes for them in separate patches.
Thanks,
baolu