Re: [PATCH] drm/vmwgfx: Fix use-after-free race in vmw_dumb_create()

Next message: Drew Fustini: "Re: [PATCH 1/4] riscv: dts: thead: beaglev-ahead: Cleanup with dt-check-style"
Previous message: Baolu Lu: "Re: [PATCH v6 02/18] iommu/pages: Add APIs to preserve/unpreserve/restore iommu pages"
In reply to: Jayapal Ashwin Nair: "[PATCH] drm/vmwgfx: Fix use-after-free race in vmw_dumb_create()"
Next in thread: Nair, Jayapal Ashwin: "Re: [PATCH] drm/vmwgfx: Fix use-after-free race in vmw_dumb_create()"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

From: Maaz Mombasawala <maaz.mombasawala@xxxxxxxxxxxx>

Date: Thu Oct 29 2026 - 21:28:04 EST

How is userspace able to see the gem handle to call DRM_IOCTL_GEM_CLOSE
on it before DRM_IOCTL_MODE_CREATE_DUMB has returned it?

--
Maaz Mombasawala <maaz.mombasawala@xxxxxxxxxxxx>