Re: [PATCH 6.18.y] accel/amdxdna: Bound the sync_bo flush range to the BO size
From: Sasha Levin
Date: Sun Oct 11 2026 - 12:48:58 EST
> amdxdna_drm_sync_bo_ioctl() passes the caller's offset and size to
> drm_clflush_virt_range() on the BO's kernel mapping without checking
> either against the BO size. The ioctl has no permission flags: any
Queued for 6.18, thanks.
--
Thanks,
Sasha