linux-stable/drivers/irqchip
Suzuki K Poulose b63de43af8 irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
[ Upstream commit 3318dc299b ]

With ACPI in place, gicv2m_get_fwnode() is registered with the pci
subsystem as pci_msi_get_fwnode_cb(), which may get invoked at runtime
during a PCI host bridge probe. But, the call back is wrongly marked as
__init, causing it to be freed, while being registered with the PCI
subsystem and could trigger:

 Unable to handle kernel paging request at virtual address ffff8000816c0400
  gicv2m_get_fwnode+0x0/0x58 (P)
  pci_set_bus_msi_domain+0x74/0x88
  pci_register_host_bridge+0x194/0x548

This is easily reproducible on a Juno board with ACPI boot.

Retain the function for later use.

Fixes: 0644b3daca ("irqchip/gic-v2m: acpi: Introducing GICv2m ACPI support")
Signed-off-by: Suzuki K Poulose <suzuki.poulose@arm.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Reviewed-by: Marc Zyngier <maz@kernel.org>
Cc: stable@vger.kernel.org
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-06-04 14:36:53 +02:00
..
alphascale_asm9260-icoll.h
exynos-combiner.c
irq-al-fic.c
irq-alpine-msi.c
irq-armada-370-xp.c irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 2024-09-12 11:06:45 +02:00
irq-aspeed-i2c-ic.c
irq-aspeed-scu-ic.c
irq-aspeed-vic.c
irq-ath79-cpu.c
irq-ath79-misc.c
irq-ativic32.c
irq-atmel-aic5.c
irq-atmel-aic-common.c
irq-atmel-aic-common.h
irq-atmel-aic.c
irq-bcm2835.c
irq-bcm2836.c
irq-bcm6345-l1.c
irq-bcm7038-l1.c
irq-bcm7120-l2.c
irq-brcmstb-l2.c
irq-clps711x.c
irq-crossbar.c
irq-csky-apb-intc.c
irq-csky-mpintc.c
irq-davinci-aintc.c
irq-davinci-cp-intc.c
irq-digicolor.c
irq-dw-apb-ictl.c
irq-eznps.c
irq-ftintc010.c
irq-gic-common.c
irq-gic-common.h
irq-gic-pm.c
irq-gic-realview.c
irq-gic-v2m.c irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() 2025-06-04 14:36:53 +02:00
irq-gic-v3-its-fsl-mc-msi.c
irq-gic-v3-its-pci-msi.c
irq-gic-v3-its-platform-msi.c
irq-gic-v3-its.c irqchip/gic-v4: Don't allow a VMOVP on a dying VPE 2024-10-22 15:39:29 +02:00
irq-gic-v3-mbi.c
irq-gic-v3.c irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly 2025-02-01 18:22:29 +01:00
irq-gic-v4.c
irq-gic.c irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base 2025-01-09 13:25:05 +01:00
irq-goldfish-pic.c
irq-hip04.c
irq-i8259.c
irq-imgpdc.c
irq-imx-gpcv2.c
irq-imx-intmux.c
irq-imx-irqsteer.c irqchip/imx-irqsteer: Handle runtime power management correctly 2024-08-19 05:41:08 +02:00
irq-ingenic-tcu.c
irq-ingenic.c
irq-ixp4xx.c
irq-jcore-aic.c
irq-keystone.c
irq-loongson-htpic.c
irq-loongson-htvec.c
irq-loongson-liointc.c
irq-loongson-pch-msi.c
irq-loongson-pch-pic.c
irq-lpc32xx.c
irq-ls1x.c
irq-ls-extirq.c
irq-ls-scfg-msi.c
irq-madera.c
irq-mbigen.c irqchip/mbigen: Fix mbigen node address layout 2024-08-19 05:41:10 +02:00
irq-meson-gpio.c irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' 2024-08-19 05:41:19 +02:00
irq-mips-cpu.c
irq-mips-gic.c
irq-mmp.c
irq-mscc-ocelot.c
irq-mst-intc.c
irq-mtk-cirq.c
irq-mtk-sysirq.c
irq-mvebu-gicp.c
irq-mvebu-icu.c
irq-mvebu-odmi.c
irq-mvebu-pic.c
irq-mvebu-sei.c
irq-mxs.c
irq-nvic.c
irq-omap-intc.c
irq-ompic.c
irq-or1k-pic.c
irq-orion.c
irq-owl-sirq.c
irq-partition-percpu.c
irq-pic32-evic.c
irq-pruss-intc.c
irq-rda-intc.c
irq-renesas-h8s.c
irq-renesas-h8300h.c
irq-renesas-intc-irqpin.c
irq-renesas-irqc.c
irq-renesas-rza1.c
irq-riscv-intc.c
irq-sa11x0.c
irq-sifive-plic.c
irq-sirfsoc.c
irq-sl28cpld.c
irq-sni-exiu.c
irq-st.c
irq-stm32-exti.c
irq-sun4i.c
irq-sunxi-nmi.c irqchip/sunxi-nmi: Add missing SKIP_WAKE flag 2025-02-01 18:22:32 +01:00
irq-tango.c
irq-tb10x.c
irq-tegra.c
irq-ti-sci-inta.c
irq-ti-sci-intr.c
irq-ts4800.c
irq-uniphier-aidet.c
irq-versatile-fpga.c
irq-vf610-mscm-ir.c
irq-vic.c
irq-vt8500.c
irq-xilinx-intc.c irqchip/xilinx: Fix shift out of bounds 2024-08-19 05:41:19 +02:00
irq-xtensa-mx.c
irq-xtensa-pic.c
irq-zevio.c
irqchip.c
Kconfig
Makefile
qcom-irq-combiner.c
qcom-pdc.c
spear-shirq.c