Hi Dave, Sima, this is the weekly fixes PR from DRM misc.
Best regards Thomas drm-misc-fixes-2026-06-05: Short summary of fixes pull: dumb-buffer: - remove strict limits on buffer geometry ethosu: - reject unsupported NPU_OP_RESIZE - fix index of IFM region - fix weight index - fix overflows in DMA-size calculations - reject DMA commands with uninitialized length - fix OOB write in ethosu_gem_cmdstream_copy_and_validate imx: - fix kernel-doc warnings ivpu: - add overflow checks in firmware handling and get_info_ioctl v3d: - wait for pending L2T flush before cleaning caches - fix leak of vaddr - skip CSD when it has zeroed workgroups - fix ref counting in performance monitoring The following changes since commit 5ab62dd3687bcc2cc542b99385aabac5c996db6f: drm: prevent integer overflows in dumb buffer creation helpers (2026-05-29 08:30:47 +0200) are available in the Git repository at: https://gitlab.freedesktop.org/drm/misc/kernel.git tags/drm-misc-fixes-2026-06-05 for you to fetch changes up to c0837b9cf6eabbad8b8cbddaff1a46a6d0a2e29d: accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() (2026-06-04 22:07:59 -0500) ---------------------------------------------------------------- Short summary of fixes pull: dumb-buffer: - remove strict limits on buffer geometry ethosu: - reject unsupported NPU_OP_RESIZE - fix index of IFM region - fix weight index - fix overflows in DMA-size calculations - reject DMA commands with uninitialized length - fix OOB write in ethosu_gem_cmdstream_copy_and_validate imx: - fix kernel-doc warnings ivpu: - add overflow checks in firmware handling and get_info_ioctl v3d: - wait for pending L2T flush before cleaning caches - fix leak of vaddr - skip CSD when it has zeroed workgroups - fix ref counting in performance monitoring ---------------------------------------------------------------- Andrzej Kacprowski (3): accel/ivpu: Add bounds check for firmware runtime memory accel/ivpu: Add bounds checks for firmware log indices accel/ivpu: Add buffer overflow check in MS get_info_ioctl Maíra Canal (4): drm/v3d: Wait for pending L2T flush before cleaning caches drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups drm/v3d: Skip CSD when it has zeroed workgroups drm/v3d: Fix global performance monitor reference counting Muhammad Bilal (6): accel/ethosu: fix IFM region index out-of-bounds in command stream parser accel/ethosu: reject NPU_OP_RESIZE commands from userspace accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85 accel/ethosu: fix arithmetic issues in dma_length() accel/ethosu: reject DMA commands with uninitialized length accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() Thomas Zimmermann (1): drm/dumb-buffer: Drop buffer-size limits for now Yicong Hui (1): drm/imx: Fix three kernel-doc warnings in dcss-scaler.c drivers/accel/ethosu/ethosu_gem.c | 35 +++++++++++++++++++++++++--------- drivers/accel/ivpu/ivpu_fw.c | 16 ++++++++++++++++ drivers/accel/ivpu/ivpu_fw_log.c | 5 +++++ drivers/accel/ivpu/ivpu_ms.c | 7 +++++++ drivers/gpu/drm/drm_dumb_buffers.c | 7 ------- drivers/gpu/drm/imx/dcss/dcss-scaler.c | 3 +++ drivers/gpu/drm/v3d/v3d_gem.c | 8 ++++++++ drivers/gpu/drm/v3d/v3d_perfmon.c | 24 ++++++++++++++++++----- drivers/gpu/drm/v3d/v3d_sched.c | 17 ++++++++++++++--- 9 files changed, 98 insertions(+), 24 deletions(-) -- Thomas Zimmermann Graphics Driver Developer SUSE Software Solutions Germany GmbH Frankenstr. 146, 90461 Nürnberg, Germany, www.suse.com GF: Jochen Jaser, Andrew McDonald, Werner Knoblich, (HRB 36809, AG Nürnberg)
