Re: [PATCH] iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX
Farhan Ali <[email protected]>
| Newsgroups | dev.linux.lists.iommu,org.kernel.vger.linux-kernel,org.kernel.vger.linux-s390 |
|---|---|
| Message-ID | <[email protected]> |
On 8/18/2026 12:13 PM, Niklas Schnelle wrote: > When using a 5-level translation table via ZPCI_TABLE_TYPE_RFX > get_rso_from_iova() returns NULL when the region-first entry is invalid. > Yet in get_rto_from_iova() the region-second origin rso is not checked > to be non-NULL before accessing rso[rsx] leading to a NULL pointer > dereference instead of a NULL return when iova_to_phys() is called on > a unmapped IOVA. Fix this by adding the missing NULL check. > > Cc:[email protected] > Fixes: 81244074b518 ("iommu/s390: allow larger region tables") > Signed-off-by: Niklas Schnelle<[email protected]> > --- > drivers/iommu/s390-iommu.c | 2 ++ > 1 file changed, 2 insertions(+) Reviewed-by: Farhan Ali<[email protected]>