drm/ttm: Fix bo resource use-after-free
From Thadeu Lima de Souza Cascardo
73867f2536704760dc42671eb508c1fdc7fd9b0b in linux-6.18.y/6.18.53
91d7e9df42598af28ca440b95b16a4e51a408771 in mainline linux
drm/ttm: Drop tt->restore after successful restore
From Matthew Brost
329ddc5d438f991f49e4fd24c704d1c7288d5e03 in linux-6.18.y/6.18.53
941ac10529b3be5965a88d432a161ab459672ba8 in mainline linux
Disable LZ77 dictionary coder to avoid a potential side-channel leak
A chosen-plaintext attack method exists which makes use of
dictionary-based compression to recover secrets from one channel by
interacting with the SSH session's shared compression dictionary through
another channel.
Attacker-controlled input can recognizably reflect into the total length
of transmitted ciphertexts by virtue of LZ77 replacing repeated strings
with back-references into the SSH session's encoder search buffer,
which is shared across all channels. For this reason, the documentation
already recommended against enabling compression for connections that
share trusted and untrusted traffic.
As an extra precaution, use only Huffman coding when compressing
plaintexts, as this algorithm does not use a dictionary. But, this
results in a reduction of compression effectiveness.
Inspired by "Crossing the Streams: SSH Plaintext Recovery via a Common
[4 lines not shown]
drm/ttm: Tidy usage of local variables a little bit
From Tvrtko Ursulin
b21c971e4cb11c0c7ea74261f966814280c02647 in linux-6.18.y/6.18.53
c06da4b3573a2d3c906c185450d0b1059d02820e in mainline linux
drm/amd/display: Honor Broadcast RGB for BT.2020 RGB output
From Satyajit Roy
037a00dfd5838d616bc04195b182055da1b33fe6 in linux-6.18.y/6.18.53
7fca7acd60a228b62b4e9efa5f184738041e9564 in mainline linux
drm/amd/display: Propagate HDMI RGB quantization selectability
From Satyajit Roy
6194e1b536dc624e05412507fb84c6c880e1f8b5 in linux-6.18.y/6.18.53
bdcd0411d7d186225a52458fd42bb70d54ca917a in mainline linux
drm/amd/display: Rebuild InfoFrames on output color space changes
From Satyajit Roy
925d9aa99a69ddf461f256c397590957d35dee8a in linux-6.18.y/6.18.53
8cfd9e22eb5c04b15b82985ff913944f84673d4f in mainline linux
drm/pagemap: dma-unmap pages before handling migration errors
From Matthew Brost
e4331c6644db85bc6ceb470bd84bcf371b6dbfa6 in linux-6.18.y/6.18.53
9e6372ec2a3990662ae0a67f56ac0aee19848d5b in mainline linux
drm/amdgpu: avoid force-completing uninitialized UVD rings
From Bob Zhou
dc136795f9997adc8d3219f40e8e3afa7df7183f in linux-6.18.y/6.18.53
6760f5cb12d2366ddd58a2d8637f7583d73f596b in mainline linux
drm/amdgpu: plumb timedout fence through to force completion
From Alex Deucher
a335084eae7a103a9f34f8cf8edf1935248035a0 in linux-6.18.y/6.18.53
c184df870db1e328691ea0fbb7d0e59efd9d3f9f in mainline linux
drm/amdgpu: Make amdgpu_vm_flush() non-failing in submission path
From Srinivasan Shanmugam
f90d671463defa0a1081dae4ec2be0f67f22b141 in linux-6.18.y/6.18.53
37872d06f85f0349e7b1f0680aea77326f7c135e in mainline linux
drm/amdgpu: reorder IB schedule sequence
From Alex Deucher
aa0136206cea800686e0ed9faa5e5c661699b1d0 in linux-6.18.y/6.18.53
d3499de3b737f3f6a2058382f7bff641c74f52a4 in mainline linux
drm/amdgpu: add a helper to calculate ring distance
From Alex Deucher
3d0162c5be362d176c5c1425d48e40a9460fa5fa in linux-6.18.y/6.18.53
08e7d6c3cee880bd3ec3eb14c478f9fa805b0bdc in mainline linux
drm/amdgpu: Fix missing unwind in amdgpu_ib_schedule() error path
From Srinivasan Shanmugam
015a7b68166c26b1a508e0bd212b545c3224a8d2 in linux-6.18.y/6.18.53
ba038065655c45728be346d0b174a6da08d8a5c5 in mainline linux
drm/i915: Fix memory leak in query_perf_config_list()
From Thorsten Blum
9ac6db531abe98adfd395fea25c00fee37de8154 in linux-6.18.y/6.18.53
cbd3dafc2003db679ccd2f6c6a2551db79657049 in mainline linux
drm/drm_exec: fix up contended obj when num_objects is 0
From Sunil Khatri
f3e74866018dab793ebee1fdf0ef34f7271d1f8c in linux-6.18.y/6.18.53
159720704d9d652b64390c11fb971e15b0a78d23 in mainline linux
drm/amdgpu: skip gfx switch_power_profile during GPU reset
From Prike Liang
054022c8e74fe9b6cde63e636146b87cfe40f107 in linux-6.18.y/6.18.53
1f1d43418d61c8511779e0f63a954a78b9433b43 in mainline linux
dm/amdgpu: fix malformed link_settings debugfs output
From Harry Wentland
784f4e9a0bd6bd4d51d89c9e67fff661d8d5e52b in linux-6.18.y/6.18.53
622b4e8505aa7453a53d17fa3a288871f270fc8b in mainline linux
drm/amdgpu/userq: fix struct drm_amdgpu_info_device padding for 32bit compile
From Yogesh Mohan Marimuthu
66c08e5ee8f97e89f73745d38cc5534ef8d0dd18 in linux-6.18.y/6.18.53
13af55f71399f5e562f6cb59ad413476e513c4d4 in mainline linux
drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized
From Timur Kristof
52c4c623474df0e19efa158057966f2a149bda28 in linux-6.18.y/6.18.53
f8922d5a946699fc2bdc7660e6778bd6726bf8b8 in mainline linux
drm/amdgpu: flush pending RCU callbacks on module unload
From Perry Yuan
27d43ad57759c73b8fad5b2bad62a0616e116bbc in linux-6.18.y/6.18.53
67a654b41cfa73c3b83402c4a01b2689cad5b9bc in mainline linux
drm/amdkfd: Properly acquire queue buffers in CRIU restore
From David Francis
c6c290e408fe328e091f0bf7502a42b0deea82e9 in linux-6.18.y/6.18.53
20a5e7ffdfecddc34c60a6b4483f42acf3d8731d in mainline linux
Move record content to TLSv1.2 record layer.
This allows us to simplify the opening of records and will enable
further development that makes the record layer self-contained,
matching the TLSv1.3 record layer.
For now, provide an accessor that allows the record content to be
accessed from outside of the record layer - we'll remove this in
the future.
ok joshua@ tb@
drm/amdgpu: Use system unbound workqueue for soft IH ring
From Timur Kristof
34c20c79e2a4dc906d2f74d102ff5066ff1cadaf in linux-6.18.y/6.18.53
ba2977dcce72127986fbad76c4c67f134e2f69ae in mainline linux
drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap
From Xiaogang Chen
a7a2333f45b15e57ddbd14edd56e367fdcb9b163 in linux-6.18.y/6.18.53
516bf737a5602875f6c28d1028967837c8edf2c0 in mainline linux
drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl
From Xiaogang Chen
2d9fd0f01550aab4a0a1984b4379e50545906248 in linux-6.18.y/6.18.53
8242a8d9d7194d5ef8a8b38a5621ca0966a3ec15 in mainline linux
drm/amdkfd: Unwind debug trap enable on copy_to_user failure
From Yongqiang Sun
1b39f46eec2f907417d4955bb88434170f94a8d8 in linux-6.18.y/6.18.53
01112e241e37f9ac98b6f418d93ce2e0b87b7ee0 in mainline linux