Re: [PATCH 6.18.y] accel/amdxdna: Bound the sync_bo flush range to the BO size

From: Sasha Levin

Date: Sun Oct 11 2026 - 12:48:58 EST


> amdxdna_drm_sync_bo_ioctl() passes the caller's offset and size to
> drm_clflush_virt_range() on the BO's kernel mapping without checking
> either against the BO size. The ioctl has no permission flags: any

Queued for 6.18, thanks.

--
Thanks,
Sasha