[PATCH 0/7] s390/pci: Fix multiple bugs in IRQ domain migration
From: Tobias Schumacher
Date: Wed Aug 19 2026 - 04:52:28 EST
Commit f770950a4709 ("s390/pci: Migrate s390 IRQ logic to IRQ
domain API") introduced several bugs in error handling and cleanup
paths. This series fixes these issues:
1. Null pointer dereference and double-free in MSI cleanup
2. Use-after-free race in floating interrupt cleanup
3. Resource leak in MSI setup error path
4. Wrong number of IRQs freed in directed-mode teardown
5. Missing NULL checks in zpci_msi_clear_airq()
6. Resource leak in zpci_directed_irq_init() error path
7. Inefficient MSI affinity flag initialization
Patches 1-6 fix critical bugs that can cause crashes, memory
corruption, or resource exhaustion. Patch 7 is a cleanup that moves
flag initialization to a more appropriate location.
Tobias Schumacher (7):
s390/pci: fix null pointer dereference and double-free in zpci MSI cleanup
s390/pci: fix use-after-free race in zpci floating interrupt cleanup
s390/pci: fix resource leak in zpci MSI setup
s390/pci: fix MSI directed-mode teardown IRQ bit count
s390/pci: add NULL check in zpci_msi_clear_airq()
s390/pci: add error cleanup in zpci_directed_irq_init
s390/pci: move MSI affinity flag initialization to boot time
Signed-off-by: Tobias Schumacher <ts@xxxxxxxxxxxxx>
---
Tobias Schumacher (7):
s390/pci: fix double-free in zpci MSI cleanup
s390/pci: fix use-after-free race in zpci floating interrupt cleanup
s390/pci: fix resource leak in zpci MSI setup
s390/pci: fix MSI directed-mode teardown IRQ bit count
s390/pci: add NULL check in zpci_msi_clear_airq()
s390/pci: add error cleanup in zpci_directed_irq_init
s390/pci: move MSI affinity flag initialization to boot time
arch/s390/pci/pci_irq.c | 59 ++++++++++++++++++++++++++++++++++++++-----------
1 file changed, 46 insertions(+), 13 deletions(-)
---
base-commit: ff35cca8fb33b213bb41a20d7ed27ecf0fc3152a
change-id: 20260818-s390_irq_domain_fixes-ad74b3134c51
Best regards,
--
Tobias Schumacher <ts@xxxxxxxxxxxxx>