[PATCH v2 00/11] iommu/tegra241-cmdqv: Fix error-interrupt races and VINTF lifecycle bugs

Nicolin Chen nicolinc at nvidia.com
Tue Jul 28 09:54:49 PDT 2026


On Tue, Jul 28, 2026 at 12:15:26PM +0100, Will Deacon wrote:
> On Tue, 14 Jul 2026 13:54:57 -0700, Nicolin Chen wrote:
> > These fix a cluster of bugs reported by Sashiko during patch reviews. The
> > patches are ordered roughly most-critical-first, so some later ones fix
> > smaller pre-existing issues in the same functions that earlier patches
> > touch.
> > 
> > Issues fixed:
> >   - the error ISR racing VINTF (de)init and reading a NULL, freed, or not
> >     yet fully initialized slot
> >   - the probe fallback dereferencing an smmu freed by devm_krealloc()
> >   - a guest vSID programmed without validating its width or the device's
> >     Stream ID count
> >   - VINTF0 leaked on an init-failure path
> >   - error-map index/bounds handling and a VCMDQ base above the 48-bit limit
> >   - the error ISR flooding the kernel log under repeated guest errors
> > 
> > [...]
> 
> Applied (apart from patch 10) to iommu (arm/smmu/updates), thanks!

Should I respin PATCH-10? Or do you prefer dropping it?

Thanks
Nicolin



More information about the linux-arm-kernel mailing list