Re: [PATCH] dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources

From: Vinod Koul

Date: Thu Sep 03 2026 - 13:07:03 EST



On Sat, 18 Jul 2026 16:52:27 -0700, Rosen Penev wrote:
> fsl_re_free_chan_resources() loops alloc_count times calling
> list_first_entry() on free_q without checking whether the list still
> has entries. If descriptors remain un-acked or pending in submit_q /
> active_q / ack_q when the channel resources are freed, free_q becomes
> smaller than alloc_count and list_first_entry() returns the list head,
> causing list_del() to corrupt the list head and dereference a bogus
> pointer.
>
> [...]

Applied, thanks!

[1/1] dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources
commit: d805aa5b6088b193debabaa80cc0991bfa2bd057

Best regards,
--
~Vinod