[PATCH 03/12] irqchip/gic-v5-irs: validate MADT IRS entries
From: Jiale Yao
Date: Wed Oct 28 2026 - 01:04:37 EST
The IRS parser uses configuration addresses and flags from a typed MADT
record without checking its size. Reject incomplete IRS records before
accessing those fields.
Fixes: 35866efa52fe ("irqchip/gic-v5: Add ACPI IRS probing")
Cc: stable@xxxxxxxxxxxxxxx
Signed-off-by: Jiale Yao <yaojiale02@xxxxxxx>
---
drivers/irqchip/irq-gic-v5-irs.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/drivers/irqchip/irq-gic-v5-irs.c b/drivers/irqchip/irq-gic-v5-irs.c
index 4e60a1caaba5..0139f80934d7 100644
--- a/drivers/irqchip/irq-gic-v5-irs.c
+++ b/drivers/irqchip/irq-gic-v5-irs.c
@@ -955,6 +955,9 @@ static int __init gic_acpi_parse_madt_irs(union acpi_subtable_headers *header,
struct resource *r;
int ret;
+ if (BAD_MADT_ENTRY(irs, end))
+ return -EINVAL;
+
/* Per-IRS data structure */
irs_data = kzalloc_obj(*irs_data);
if (!irs_data)
--
2.34.1