In the Linux kernel, the following vulnerability has been resolved:
drm/msm/gem: Fix error code msmparsedeps()
The SUBMITERROR() macro turns the error code negative. This extra '-' operation turns it back to positive EINVAL again. The error code is passed to ERRPTR() and since positive values are not an IS_ERR() it eventually will lead to an oops. Delete the '-'.
Patchwork: https://patchwork.freedesktop.org/patch/637625/