Koichiro Den fcb32111f0 iommufd: Fix missing update of domains_itree after splitting iopt_area ...

commit e7250ab7ca upstream.

In iopt_area_split(), if the original iopt_area has filled a domain and is
linked to domains_itree, pages_nodes have to be properly
reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.

Fixes: 51fe6141f0 ("iommufd: Data structure to provide IOVA to PFN mapping")
Link: https://lore.kernel.org/r/20231027162941.2864615-2-den@valinux.co.jp
Cc: stable@vger.kernel.org
Signed-off-by: Koichiro Den <den@valinux.co.jp>
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-11-28 17:19:57 +00:00

..

amd

Merge tag 'iommu-updates-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu

2023-09-01 16:54:25 -07:00

arm

iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range

2023-09-22 11:15:42 +01:00

intel

iommu/vt-d: Avoid memory allocation in iommu_suspend()

2023-09-25 16:10:36 +02:00

iommufd

iommufd: Fix missing update of domains_itree after splitting iopt_area

2023-11-28 17:19:57 +00:00

apple-dart.c

iommu/apple-dart: Handle DMA_FQ domains in attach_dev()

2023-09-25 11:37:19 +02:00

dma-iommu.c

iommu: Optimise PCI SAC address trick

2023-07-14 16:14:17 +02:00

dma-iommu.h

iommu: Optimise PCI SAC address trick

2023-07-14 16:14:17 +02:00

exynos-iommu.c

Merge branches 'iommu/fixes', 'arm/allwinner', 'arm/exynos', 'arm/mediatek', 'arm/omap', 'arm/renesas', 'arm/rockchip', 'arm/smmu', 'ppc/pamu', 'unisoc', 'x86/vt-d', 'x86/amd', 'core' and 'platform-remove_new' into next

2023-04-14 13:45:50 +02:00

fsl_pamu_domain.c

iommu/fsl: Use driver_managed_dma to allow VFIO to work

2023-06-01 11:47:48 +02:00

fsl_pamu_domain.h

iommu/fsl_pamu: remove the snoop_id field

2021-04-07 10:56:52 +02:00

fsl_pamu.c

iommu/fsl: fix all kernel-doc warnings in fsl_pamu.c

2023-03-22 14:50:15 +01:00

fsl_pamu.h

iommu/fsl_pamu: hardcode the window address and size in pamu_config_ppaace

2021-04-07 10:56:52 +02:00

hyperv-iommu.c

x86/vector: Rename send_cleanup_vector() to vector_schedule_cleanup()

2023-08-06 14:15:09 +02:00

io-pgfault.c

iommu: Rename iommu-sva-lib.{c,h}

2022-11-03 15:47:54 +01:00

io-pgtable-arm-v7s.c

iommu/io-pgtable-arm-v7s: Remove map/unmap

2022-11-19 10:44:15 +01:00

io-pgtable-arm.c

iommu/io-pgtable-arm: Remove map/unmap

2022-11-19 10:44:15 +01:00

io-pgtable-arm.h

iommu/io-pgtable-arm: Move some definitions to a header

2020-09-28 23:48:06 +01:00

io-pgtable-dart.c

iommu/io-pgtable-dart: Add DART PTE support for t6000

2022-09-26 13:49:40 +02:00

io-pgtable.c

Merge branches 'apple/dart', 'arm/mediatek', 'arm/omap', 'arm/smmu', 'virtio', 'x86/vt-d', 'x86/amd' and 'core' into next

2022-09-26 15:52:31 +02:00

iommu-debugfs.c

iommu: Fix IOMMU debugfs fallout

2019-02-26 11:15:58 +01:00

iommu-priv.h

iommu: Move dev_iommu_ops() to private header

2023-08-18 12:52:15 -03:00

iommu-sva.c

iommu: Move global PASID allocation from SVA to core

2023-08-09 17:44:36 +02:00

iommu-sva.h

iommu: Remove ioasid infrastructure

2023-03-31 10:03:31 +02:00

iommu-sysfs.c

iommu: Do not export iommu_device_link/unlink()

2023-07-14 16:14:15 +02:00

iommu-traces.c

iommu: Remove detach_dev callback

2023-01-13 16:39:18 +01:00

iommu.c

iommu: Avoid unnecessary cache invalidations

2023-10-27 08:57:09 +02:00

iova.c

iommu/iova: Optimize iova_magazine_alloc()

2023-05-22 17:09:51 +02:00

ipmmu-vmsa.c

Merge branches 'apple/dart', 'arm/mediatek', 'arm/renesas', 'arm/rockchip', 'arm/smmu', 'unisoc', 'x86/vt-d', 'x86/amd' and 'core' into next

2023-08-21 14:18:43 +02:00

irq_remapping.c

x86: Kill all traces of irq_remapping_get_irq_domain()

2020-10-28 20:26:28 +01:00

irq_remapping.h

x86: Kill all traces of irq_remapping_get_irq_domain()

2020-10-28 20:26:28 +01:00

Kconfig

Merge tag 'mm-stable-2023-06-24-19-15' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2023-06-28 10:28:11 -07:00

Makefile

iommu: Remove ioasid infrastructure

2023-03-31 10:03:31 +02:00

msm_iommu_hw-8xxx.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 267

2019-06-05 17:30:29 +02:00

msm_iommu.c

iommu/msm: Convert to platform remove callback returning void

2023-03-31 10:01:57 +02:00

msm_iommu.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 267

2019-06-05 17:30:29 +02:00

mtk_iommu_v1.c

iommu/mtk_iommu_v1: Convert to platform remove callback returning void

2023-03-31 10:01:58 +02:00

mtk_iommu.c

iommu/mediatek: Fix share pgtable for iova over 4GB

2023-09-25 11:34:02 +02:00

of_iommu.c

iommu: Have __iommu_probe_device() check for already probed devices

2023-07-14 16:14:12 +02:00

omap-iommu-debug.c

iommu/omap: Fix buffer overflow in debugfs

2022-09-07 10:42:28 +02:00

omap-iommu.c

Merge branches 'iommu/fixes', 'arm/allwinner', 'arm/exynos', 'arm/mediatek', 'arm/omap', 'arm/renesas', 'arm/rockchip', 'arm/smmu', 'ppc/pamu', 'unisoc', 'x86/vt-d', 'x86/amd', 'core' and 'platform-remove_new' into next

2023-04-14 13:45:50 +02:00

omap-iommu.h

iommu/omap: add support for late attachment of iommu devices

2019-08-09 17:37:10 +02:00

omap-iopgtable.h

iommu/omap: Fix -Woverflow warnings when compiling on 64-bit architectures

2020-03-04 16:24:46 +01:00

rockchip-iommu.c

iommu: rockchip: Allocate tables from all available memory for IOMMU v2

2023-07-14 16:18:04 +02:00

s390-iommu.c

Merge tag 'for-linus-iommufd' of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd

2023-02-24 14:34:12 -08:00

sprd-iommu.c

Merge branches 'apple/dart', 'arm/mediatek', 'arm/renesas', 'arm/rockchip', 'arm/smmu', 'unisoc', 'x86/vt-d', 'x86/amd' and 'core' into next

2023-08-21 14:18:43 +02:00

sun50i-iommu.c

iommu/sun50i: remove MODULE_LICENSE in non-modules

2023-04-13 13:13:52 -07:00

tegra-gart.c

iommu: Add set_platform_dma_ops callbacks

2023-01-13 16:39:16 +01:00

tegra-smmu.c

iommu: Explicitly include correct DT includes

2023-08-21 14:17:59 +02:00

virtio-iommu.c

iommu: Explicitly include correct DT includes

2023-08-21 14:17:59 +02:00