raspi/linux
1
0
Fork 1
mirror of https://github.com/raspberrypi/linux.git synced 2025-12-27 20:42:52 +00:00
Code Issues Projects Releases Wiki Activity
Files
46366fe22bbfff067b9351f238ff00a48763be0d
linux/fs
History
Miklos Szeredi 07d54b8dc5 fuse: fix page dereference after free 
commit d78092e493 upstream.

After unlock_request() pages from the ap->pages[] array may be put (e.g. by
aborting the connection) and the pages can be freed.

Prevent use after free by grabbing a reference to the page before calling
unlock_request().

The original patch was created by Pradeep P V K.

Reported-by: Pradeep P V K <ppvk@codeaurora.org>
Cc: <stable@vger.kernel.org>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-11-01 12:45:41 +01:00
..
9p
9p: Fix memory leak in v9fs_mount
2020-08-19 08:27:03 +02:00
adfs
docs: filesystems: fix renamed references
2020-04-20 15:45:22 -06:00
affs
affs: fix basic permission bits to actually work
2020-09-09 19:14:29 +02:00
afs
afs: Fix cell removal
2020-10-29 10:08:02 +01:00
autofs
autofs: use __kernel_write() for the autofs pipe writing
2020-10-07 08:02:53 +02:00
befs
…
bfs
docs: filesystems: fix renamed references
2020-04-20 15:45:22 -06:00
btrfs
btrfs: add owner and fs_info to alloc_state io_tree
2020-10-29 10:07:26 +01:00
cachefiles
cachefiles: switch to kernel_write
2020-07-08 08:27:56 +02:00
ceph
ceph: don't allow setlease on cephfs
2020-09-09 19:14:10 +02:00
cifs
smb3: fix stat when special device file and mounted with modefromsid
2020-10-29 10:07:10 +01:00
coda
docs: filesystems: convert coda.txt to ReST
2020-05-05 09:22:21 -06:00
configfs
Merge tag 'docs-5.8' of git://git.lwn.net/linux
2020-06-01 15:45:27 -07:00
cramfs
docs: filesystems: fix renamed references
2020-04-20 15:45:22 -06:00
crypto
fscrypt: restrict IV_INO_LBLK_32 to ino_bits <= 32
2020-10-29 10:07:19 +01:00
debugfs
debugfs: Fix module state check condition
2020-09-17 13:55:44 +02:00
devpts
…
dlm
fs: dlm: fix configfs memory leak
2020-10-29 10:08:20 +01:00
ecryptfs
Merge tag 'docs-5.8' of git://git.lwn.net/linux
2020-06-01 15:45:27 -07:00
efivarfs
efivarfs: Replace invalid slashes with exclamation marks in dentries.
2020-11-01 12:45:37 +01:00
efs
…
erofs
erofs: avoid duplicated permission check for "trusted." xattrs
2020-11-01 12:45:40 +01:00
exfat
exfat: fix use of uninitialized spinlock on error path
2020-10-14 11:55:46 +02:00
exportfs
…
ext2
ext2: don't update mtime on COW faults
2020-09-09 19:14:24 +02:00
ext4
ext4: limit entries returned when counting fsmap records
2020-10-29 10:08:08 +01:00
f2fs
f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
2020-10-29 10:08:02 +01:00
fat
fat: fix fat_ra_init() for data clusters == 0
2020-08-26 11:49:07 +02:00
freevxfs
…
fscache
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2020-06-03 16:27:18 -07:00
fuse
fuse: fix page dereference after free
2020-11-01 12:45:41 +01:00
gfs2
gfs2: add some much needed cleanup for log flushes that fail
2020-09-09 19:14:09 +02:00
hfs
Merge tag 'for-5.8/block-2020-06-01' of git://git.kernel.dk/linux-block
2020-06-02 15:29:19 -07:00
hfsplus
block: remove the error_sector argument to blkdev_issue_flush
2020-05-22 08:45:46 -06:00
hostfs
hostfs: Use kasprintf() instead of fixed buffer formatting
2020-03-29 23:23:00 +02:00
hpfs
hpfs: fix warning due to superfluous semicolon
2020-06-06 10:08:17 -07:00
hugetlbfs
hugetlbfs: prevent filesystem stacking of hugetlbfs
2020-09-03 11:29:22 +02:00
iomap
iomap: fix WARN_ON_ONCE() from unprivileged users
2020-10-29 10:08:25 +01:00
isofs
Merge tag 'for-5.8/block-2020-06-01' of git://git.kernel.dk/linux-block
2020-06-02 15:29:19 -07:00
jbd2
jbd2: abort journal if free a async write error metadata buffer
2020-09-03 11:29:30 +02:00
jffs2
jffs2: fix UAF problem
2020-08-26 11:49:06 +02:00
jfs
Merge tag 'jfs-5.8' of git://github.com/kleikamp/linux-shaggy
2020-06-02 20:11:35 -07:00
kernfs
kernfs: do not call fsnotify() with name without a parent
2020-08-19 08:26:35 +02:00
lockd
…
minix
fs/minix: remove expected error message in block_to_path()
2020-08-21 13:15:18 +02:00
nfs
nfs: add missing "posix" local_lock constant table definition
2020-10-29 10:07:54 +01:00
nfs_common
…
nfsd
nfsd: fix oops on mixed NFSv4/NFSv3 client access
2020-09-03 11:29:26 +02:00
nilfs2
nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()
2020-06-10 19:14:17 -07:00
nls
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
notify
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
ntfs
ntfs: add check for mft record size in superblock
2020-10-29 10:08:21 +01:00
ocfs2
ocfs2: change slot number type s16 to u16
2020-08-21 13:14:58 +02:00
omfs
fs: convert mpage_readpages to mpage_readahead
2020-06-02 10:59:07 -07:00
openpromfs
…
orangefs
Merge tag 'for-linus-5.8-ofs1' of git://git.kernel.org/pub/scm/linux/kernel/git/hubcap/linux
2020-06-05 16:44:36 -07:00
overlayfs
ovl: fix lookup of indexed hardlinks with metacopy
2020-07-16 07:24:47 +02:00
proc
mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary
2020-10-29 10:07:50 +01:00
pstore
pstore: Fix linking when crypto API disabled
2020-08-19 08:27:02 +02:00
qnx4
…
qnx6
fs: convert mpage_readpages to mpage_readahead
2020-06-02 10:59:07 -07:00
quota
quota: clear padding in v2r1_mem2diskdqb()
2020-10-29 10:07:44 +01:00
ramfs
ramfs: fix nommu mmap with gaps in the page cache
2020-10-29 10:08:03 +01:00
reiserfs
reiserfs: Fix memory leak in reiserfs_parse_options()
2020-10-29 10:08:27 +01:00
romfs
romfs: fix uninitialized memory leak in romfs_dev_read()
2020-08-26 11:48:59 +02:00
squashfs
squashfs: avoid bio_alloc() failure with 1Mbyte blocks
2020-08-26 11:48:59 +02:00
sysfs
Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma
2020-06-05 14:05:57 -07:00
sysv
docs: filesystems: fix renamed references
2020-04-20 15:45:22 -06:00
tracefs
…
ubifs
ubifs: Fix wrong orphan node deletion in ubifs_jnl_update|rename
2020-08-21 13:15:13 +02:00
udf
udf: Avoid accessing uninitialized data on failed inode read
2020-10-29 10:08:23 +01:00
ufs
fs/ufs: avoid potential u32 multiplication overflow
2020-08-21 13:15:18 +02:00
unicode
.gitignore: add SPDX License Identifier
2020-03-25 11:50:48 +01:00
vboxsf
vboxsf: Fix the check for the old binary mount-arguments struct
2020-10-07 08:02:47 +02:00
verity
fs-verity: remove unnecessary extern keywords
2020-05-12 16:44:00 -07:00
xfs
xfs: make sure the rt allocator doesn't run off the end
2020-10-29 10:08:25 +01:00
zonefs
zonefs: count pages after truncating the iterator
2020-07-20 17:59:31 +09:00
aio.c
aio: Replace zero-length array with flexible-array
2020-06-15 23:08:25 -05:00
anon_inodes.c
…
attr.c
…
bad_inode.c
fs: move the fiemap definitions out of fs.h
2020-06-03 23:16:55 -04:00
binfmt_aout.c
exec: Rename flush_old_exec begin_new_exec
2020-05-07 16:55:47 -05:00
binfmt_elf_fdpic.c
Merge branch 'uaccess.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2020-06-10 16:02:54 -07:00
binfmt_elf.c
Merge branch 'uaccess.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2020-06-10 16:02:54 -07:00
binfmt_em86.c
Merge branch 'akpm' (patches from Andrew)
2020-06-04 19:18:29 -07:00
binfmt_flat.c
binfmt_flat: revert "binfmt_flat: don't offset the data start"
2020-08-27 09:31:49 +02:00
binfmt_misc.c
Merge branch 'akpm' (patches from Andrew)
2020-06-04 19:18:29 -07:00
binfmt_script.c
Merge branch 'akpm' (patches from Andrew)
2020-06-04 19:18:29 -07:00
block_dev.c
block: make function 'kill_bdev' static
2020-06-18 09:24:35 -06:00
buffer.c
fs: prevent BUG_ON in submit_bh_wbc()
2020-09-03 11:29:31 +02:00
char_dev.c
vfs: allow unprivileged whiteout creation
2020-05-14 16:44:23 +02:00
compat_binfmt_elf.c
Merge tag 'core_core_updates_for_5.8' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2020-06-05 13:45:21 -07:00
compat.c
…
coredump.c
mmap locking API: convert mmap_sem comments
2020-06-09 09:39:14 -07:00
d_path.c
fs: fix NULL dereference due to data race in prepend_path()
2020-10-29 10:07:50 +01:00
dax.c
dax,iomap: Add helper dax_iomap_zero() to zero a range
2020-04-02 19:15:03 -07:00
dcache.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2020-06-03 16:27:18 -07:00
dcookies.c
…
direct-io.c
Merge tag 'for-5.8-part2-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
2020-06-14 09:47:25 -07:00
drop_caches.c
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
eventfd.c
eventfd: convert to f_op->read_iter()
2020-05-06 22:33:43 -04:00
eventpoll.c
ep_create_wakeup_source(): dentry name can change under you...
2020-10-07 08:02:55 +02:00
exec.c
io_uring: don't rely on weak ->files references
2020-11-01 12:45:35 +01:00
fcntl.c
…
fhandle.c
…
file_table.c
Revert "fs: Do not check if there is a fsnotify watcher on pseudo inodes"
2020-06-29 09:40:55 -07:00
file.c
io_uring: don't rely on weak ->files references
2020-11-01 12:45:35 +01:00
filesystems.c
fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
2020-04-10 15:36:22 -07:00
fs_context.c
vfs: don't parse "silent" option
2020-05-14 16:44:25 +02:00
fs_parser.c
fs_parse: remove pr_notice() about each validation
2020-04-02 09:35:26 -07:00
fs_pin.c
…
fs_struct.c
…
fs_types.c
…
fs-writeback.c
writeback: Fix sync livelock due to b_dirty_time processing
2020-09-03 11:29:42 +02:00
fsopen.c
…
inode.c
Merge tag 'afs-next-20200604' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs
2020-06-05 16:26:36 -07:00
internal.h
Merge tag 'ext4_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4
2020-06-05 16:19:28 -07:00
io_uring.c
io_uring: Convert advanced XArray uses to the normal API
2020-11-01 12:45:36 +01:00
io-wq.c
io-wq: fix use-after-free in io_wq_worker_running
2020-11-01 12:45:36 +01:00
io-wq.h
io_uring: reference ->nsproxy for file table commands
2020-11-01 12:45:35 +01:00
ioctl.c
fs: remove the access_ok() check in ioctl_fiemap
2020-06-03 23:16:55 -04:00
Kconfig
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
Kconfig.binfmt
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
libfs.c
block: remove the error_sector argument to blkdev_issue_flush
2020-05-22 08:45:46 -06:00
locks.c
Merge tag 'nfsd-5.8' of git://linux-nfs.org/~bfields/linux
2020-06-11 10:33:13 -07:00
Makefile
…
mbcache.c
…
mount.h
proc/mounts: add cursor
2020-05-14 16:44:24 +02:00
mpage.c
fs: convert mpage_readpages to mpage_readahead
2020-06-02 10:59:07 -07:00
namei.c
vfs: clean up posix_acl_permission() logic aroudn MAY_NOT_BLOCK
2020-06-08 11:04:19 -07:00
namespace.c
fuse: reject options on reconfigure via fsconfig(2)
2020-07-14 14:45:41 +02:00
no-block.c
…
nsfs.c
nsproxy: attach to namespaces via pidfds
2020-05-13 11:41:22 +02:00
open.c
Merge branch 'akpm' (patches from Andrew)
2020-06-02 12:21:36 -07:00
pipe.c
pipe: Fix memory leaks in create_pipe_files()
2020-10-14 11:55:55 +02:00
pnode.c
propagate_one(): mnt_set_mountpoint() needs mount_lock
2020-04-27 10:37:14 -04:00
pnode.h
…
posix_acl.c
vfs: clean up posix_acl_permission() logic aroudn MAY_NOT_BLOCK
2020-06-08 11:04:19 -07:00
proc_namespace.c
Merge branch 'proc-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
2020-06-04 13:54:34 -07:00
read_write.c
autofs: use __kernel_write() for the autofs pipe writing
2020-10-07 08:02:53 +02:00
readdir.c
readdir.c: get rid of the last __put_user(), drop now-useless access_ok()
2020-05-01 20:29:54 -04:00
select.c
pselect6() and friends: take handling the combined 6th/7th args into helper
2020-05-29 19:10:42 -04:00
seq_file.c
fs/seq_file.c: seq_read: Update pr_info_ratelimited
2020-06-04 19:06:25 -07:00
signalfd.c
fs/signalfd.c: fix inconsistent return codes for signalfd4
2020-08-26 11:49:07 +02:00
splice.c
splice: teach splice pipe reading about empty pipe buffers
2020-10-14 11:55:47 +02:00
stack.c
…
stat.c
Merge tag 'vfs-5.8-merge-1' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux
2020-06-02 19:45:12 -07:00
statfs.c
…
super.c
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2020-06-10 16:09:11 -07:00
sync.c
Merge tag 'ovl-update-5.8' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs
2020-06-09 15:40:50 -07:00
timerfd.c
…
userfaultfd.c
mmap locking API: convert mmap_sem comments
2020-06-09 09:39:14 -07:00
utimes.c
utimensat: AT_EMPTY_PATH support
2020-05-14 16:44:24 +02:00
xattr.c
xattr: break delegations in {set,remove}xattr
2020-08-11 15:48:10 +02:00