In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gem: Do not leak siblings[] on proto context error
After a successful BALANCE/PARALLEL_SUBMIT extension on context creation, error during processing of next user extension leaks the siblings[] array. Fix that.
Discovered using AI-assisted static analysis confirmed by Intel Product Security.
(cherry picked from commit aa65e0a4b51b3b54b53e4142aaa2d997aa1061ff)
References
- https://git.kernel.org/stable/c/37951ce1567ccf8c86c7a1b8fb7d55a32c821b87
- https://git.kernel.org/stable/c/6cdbef8f60f313684e641628d64aa85960080d3f
- https://git.kernel.org/stable/c/8431a4d7ff95c7f9c6fb1dbbbc9cdadf29d4f6d5
- https://git.kernel.org/stable/c/eed3de2acf6aa5154d49098b026710b646db67ee
- https://git.kernel.org/stable/c/f014702fbd48d06a3d7a06e4bb4075d406376cf0