Eslam Khafagy f417f44524 posix-timers: Plug potential memory leak in do_timer_create() ...

[ Upstream commit e0fd4d42e2 ]

When posix timer creation is set to allocate a given timer ID and the
access to the user space value faults, the function terminates without
freeing the already allocated posix timer structure.

Move the allocation after the user space access to cure that.

[ tglx: Massaged change log ]

Fixes: ec2d0c0462 ("posix-timers: Provide a mechanism to allocate a given timer ID")
Reported-by: syzbot+9c47ad18f978d4394986@syzkaller.appspotmail.com
Suggested-by: Cyrill Gorcunov <gorcunov@gmail.com>
Signed-off-by: Eslam Khafagy <eslam.medhat1993@gmail.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Reviewed-by: Frederic Weisbecker <frederic@kernel.org>
Link: https://patch.msgid.link/20251114122739.994326-1-eslam.medhat1993@gmail.com
Closes: https://lore.kernel.org/all/69155df4.a70a0220.3124cb.0017.GAE@google.com/T/
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-11-24 10:37:36 +01:00

..

alarmtimer.c

alarmtimer: Switch spin_{lock,unlock}_irqsave() to guards

2025-04-30 09:06:23 +02:00

clockevents.c

tick: Do not set device to detached state in tick_shutdown()

2025-10-15 12:03:26 +02:00

clocksource-wdtest.c

clocksource/wdtest: Print time values for short udelay(1)

2025-01-15 19:49:13 +01:00

clocksource.c

Merge tag 'bitmap-for-6.17' of https://github.com/norov/linux

2025-07-31 16:52:32 -07:00

hrtimer.c

hrtimers: Unconditionally update target CPU base after offline timer migration

2025-09-09 14:05:16 +02:00

itimer.c

signal: Confine POSIX_TIMERS properly

2024-10-29 11:43:18 +01:00

jiffies.c

time/jiffies: Change register_refined_jiffies() to void __init

2025-04-30 09:06:23 +02:00

Kconfig

time: Introduce auxiliary POSIX clocks

2025-06-19 14:28:22 +02:00

Makefile

tracing: Disable branch profiling in noinstr code

2025-03-22 09:49:26 +01:00

namespace.c

vdso/vsyscall: Update auxiliary clock data in the datapage

2025-07-18 13:45:33 +02:00

ntp_internal.h

ntp: Rename __do_adjtimex() to ntp_adjtimex()

2025-06-19 14:28:23 +02:00

ntp.c

ntp: Use ktime_get_ntp_seconds()

2025-06-19 14:28:24 +02:00

posix-clock.c

Merge tag 'net-next-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2025-03-26 21:48:21 -07:00

posix-cpu-timers.c

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

2025-06-13 10:55:49 -07:00

posix-stubs.c

posix-timers: Get rid of [COMPAT_]SYS_NI() uses

2023-12-20 21:30:27 -08:00

posix-timers.c

posix-timers: Plug potential memory leak in do_timer_create()

2025-11-24 10:37:36 +01:00

posix-timers.h

timekeeping: Add minimal posix-timers support for auxiliary clocks

2025-06-27 20:13:12 +02:00

sched_clock.c

time: Switch to hrtimer_setup()

2025-02-18 10:32:33 +01:00

sleep_timeout.c

treewide, timers: Rename from_timer() to timer_container_of()

2025-06-08 09:07:37 +02:00

test_udelay.c

time: Add MODULE_DESCRIPTION() to time test modules

2024-06-03 11:18:50 +02:00

tick-broadcast-hrtimer.c

time: Switch to hrtimer_setup()

2025-02-18 10:32:33 +01:00

tick-broadcast.c

tick/broadcast: Add kernel-doc for function parameters

2025-01-15 19:49:14 +01:00

tick-common.c

tick: Do not set device to detached state in tick_shutdown()

2025-10-15 12:03:26 +02:00

tick-internal.h

tick: Do not set device to detached state in tick_shutdown()

2025-10-15 12:03:26 +02:00

tick-legacy.c

timekeeping: remove xtime_update

2020-10-30 21:57:07 +01:00

tick-oneshot.c

time: Fix various kernel-doc problems

2023-01-03 11:07:58 +01:00

tick-sched.c

time: Switch to hrtimer_setup()

2025-02-18 10:32:33 +01:00

tick-sched.h

tick/sched: Fix struct tick_sched doc warnings

2024-04-01 10:36:35 +02:00

time_test.c

time: Add MODULE_DESCRIPTION() to time test modules

2024-06-03 11:18:50 +02:00

time.c

time: Fix references to _msecs_to_jiffies() handling of values

2024-10-25 19:50:10 +02:00

timeconst.bc

time: Add SPDX license identifiers

2018-11-23 11:51:20 +01:00

timeconv.c

time: Improve performance of time64_to_tm()

2021-06-24 11:51:59 +02:00

timecounter.c

time/timecounter: Fix the lie that struct cyclecounter is const

2025-07-01 15:38:25 +02:00

timekeeping_debug.c

timekeeping: Add percpu counter for tracking floor swap events

2024-10-10 10:20:46 +02:00

timekeeping_internal.h

timekeeping: Provide ktime_get_ntp_seconds()

2025-06-19 14:28:23 +02:00

timekeeping.c

timekeeping: Fix aux clocks sysfs initialization loop bound

2025-11-02 22:18:02 +09:00

timekeeping.h

Merge tag 'asm-generic-timers-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic

2020-12-16 00:07:17 -08:00

timer_list.c

hrtimers: Make callback function pointer private

2025-04-05 10:30:17 +02:00

timer_migration.c

timers/migration: Clean up the loop in tmigr_quick_check()

2025-06-12 21:03:45 +02:00

timer_migration.h

timer/migration: Fix kernel-doc warnings for union tmigr_state

2025-01-15 19:49:14 +01:00

timer.c

Merge tag 'timers-core-2025-05-25' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2025-05-27 09:04:15 -07:00

vsyscall.c

vdso/vsyscall: Avoid slow division loop in auxiliary clock update

2025-09-03 11:55:11 +02:00