[git pull] drm fixes for 6.18-rc1

[Dave Airlie]

Hi Linus,

Some fixes leftover from our fixes branch, just nouveau and vmwgfx.

Thanks,
Dave.

drm-fixes-2025-10-11:
drm fixes for 6.18-rc1

nouveau:
- Return errno code from TTM move helper

vmwgfx:
- Fix null-ptr access in cursor code
- Fix UAF in validation
- Use correct iterator in validation
The following changes since commit e5f0a698b34ed76002dc5cff3804a61c80233a7a:

  Linux 6.17 (2025-09-28 14:39:22 -0700)

are available in the Git repository at:

  https://gitlab.freedesktop.org/drm/kernel.git tags/drm-fixes-2025-10-11

for you to fetch changes up to 5ca5f00a167cdd28bcfeeae6ddd370b13ac00a2a:

  Merge tag 'drm-misc-fixes-2025-10-09' of
https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes
(2025-10-11 06:17:13 +1000)

----------------------------------------------------------------
drm fixes for 6.18-rc1

nouveau:
- Return errno code from TTM move helper

vmwgfx:
- Fix null-ptr access in cursor code
- Fix UAF in validation
- Use correct iterator in validation

----------------------------------------------------------------
Dave Airlie (1):
      Merge tag 'drm-misc-fixes-2025-10-09' of
https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes

Ian Forbes (2):
      drm/vmwgfx: Fix Use-after-free in validation
      drm/vmwgfx: Fix copy-paste typo in validation

Shuhao Fu (1):
      drm/nouveau: fix bad ret code in nouveau_bo_move_prep

Zack Rusin (1):
      drm/vmwgfx: Fix a null-ptr access in the cursor snooper

 drivers/gpu/drm/nouveau/nouveau_bo.c       |  2 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c    | 17 ++++++++++++-----
 drivers/gpu/drm/vmwgfx/vmwgfx_validation.c |  6 ++++--
 3 files changed, 17 insertions(+), 8 deletions(-)