Matthew Wilcox (Oracle) 785a1b05db idr: fix idr_alloc() returning an ID out of range ...

commit c6e8e595a0 upstream.

If you use an IDR with a non-zero base, and specify a range that lies
entirely below the base, 'max - base' becomes very large and
idr_get_free() can return an ID that lies outside of the requested range.

Link: https://lkml.kernel.org/r/20251128161853.3200058-1-willy@infradead.org
Fixes: 6ce711f275 ("idr: Make 1-based IDRs more efficient")
Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org>
Reported-by: Jan Sokolowski <jan.sokolowski@intel.com>
Reported-by: Koen Koning <koen.koning@intel.com>
Reported-by: Peter Senna Tschudin <peter.senna@linux.intel.com>
Closes: https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/6449
Reviewed-by: Christian König <christian.koenig@amd.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-01-19 13:11:59 +01:00

..

accounting

…

arch

x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map

2024-06-16 13:32:13 +02:00

bootconfig

tools/bootconfig: Fix the wrong format specifier

2025-03-13 12:46:56 +01:00

bpf

bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure

2025-08-28 16:22:32 +02:00

build

tools build: Align warning options with perf

2025-10-29 14:01:09 +01:00

cgroup

tools/cgroup/slabinfo.py: updated to work on current kernel

2021-05-07 11:04:31 +02:00

debugging

…

edid

…

firewire

…

firmware

…

gpio

tools: gpio: fix debounce_period_us output of lsgpio

2023-06-21 15:45:35 +02:00

hv

vmbus_testing: fix wrong python syntax for integer value comparison

2023-09-19 12:20:05 +02:00

iio

tools/iio: Add memory allocation failure check for trigger_name

2024-10-17 15:08:32 +02:00

include

compiler.h: drop fallback overflow checkers

2025-10-02 13:35:36 +02:00

io_uring

tools/io_uring: fix compile breakage

2020-09-21 07:50:58 -06:00

kvm/kvm_stat

tools/kvm_stat: fix display of error when multiple processes are found

2022-08-11 13:06:45 +02:00

laptop

…

leds

…

lib

libperf event: Ensure tracing data is multiple of 8 sized

2025-10-29 14:01:08 +01:00

memory-model

tools/memory-model: Fix bug in lock.cat

2024-08-19 05:40:58 +02:00

objtool

objtool: Stop UNRET validation on UD2

2025-05-02 07:41:20 +02:00

pci

…

pcmcia

…

perf

perf tools: Fix split kallsyms DSO counting

2026-01-19 13:11:36 +01:00

power

tools/power x86_energy_perf_policy: Prefer driver HWP limits

2025-12-07 06:08:10 +09:00

scripts

tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include

2021-07-31 08:16:10 +02:00

spi

…

testing

idr: fix idr_alloc() returning an ID out of range

2026-01-19 13:11:59 +01:00

thermal/tmon

tools/thermal: Fix possible path truncations

2022-08-21 15:16:12 +02:00

time

…

usb

usbip: tools: Fix detach_port() invalid port error path

2024-11-08 16:22:02 +01:00

virtio

tools/virtio: fix the vringh test for virtio ring changes

2023-02-22 12:55:53 +01:00

vm

tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"

2022-12-08 11:23:57 +01:00

wmi

…

Makefile

bpf: Compile resolve_btfids tool at kernel compilation start

2020-07-13 10:42:02 -07:00