On Thu, 07 Sep 2023 15:53:38 +0200, Thomas Hellström wrote:
when using __drm_kunit_helper_alloc_drm_device() the driver may be dereferenced by device-managed resources up until the device is freed, which is typically later than the kunit-managed resource code frees it. Fix this by simply make the driver device-managed as well.
In short, the sequence leading to the UAF is as follows:
[...]
Applied to drm/drm-misc (drm-misc-fixes).
Thanks! Maxime