In the Linux kernel, the following vulnerability has been resolved:
gpu: host1x: Fix iommu_map_sgtable() return value check
Commit iommu: return full error code from iommu_map_sg_atomic changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero.
pin_job() also was incorrectly assigning to int, which could cause overflows into negative values.
Update pin_job() to correctly check for errors from iommu_map_sgtable.
References
- https://git.kernel.org/stable/c/18f74762013a4b6aa6f905c4459e0f506f9c5c7b
- https://git.kernel.org/stable/c/2a68928c445138961e2c451983b473aeb3f5b999
- https://git.kernel.org/stable/c/3ac173e46ef6fda9c9df8d47cdff4df962df9728
- https://git.kernel.org/stable/c/5f3985c2a500df3126cb12a2e0ccf26a40bc495d
- https://git.kernel.org/stable/c/79240eee5a40014d9edfabe19f06b35ffa84e5f8
- https://git.kernel.org/stable/c/e024c7993d839503d6c1f0044b8fc537c30300e9