raspi/linux
1
0
Fork 1
mirror of https://github.com/raspberrypi/linux.git synced 2026-01-02 15:53:42 +00:00
Code Issues Projects Releases Wiki Activity
Files
d4e2e71cbbdf91f41ea32a42a9f4cea9ff5da42f
linux/io_uring
History
Penglei Jiang b2e92c42ef io_uring: fix potential page leak in io_sqe_buffer_register() 
[ Upstream commit e1c75831f6 ]

If allocation of the 'imu' fails, then the existing pages aren't
unpinned in the error path. This is mostly a theoretical issue,
requiring fault injection to hit.

Move unpin_user_pages() to unified error handling to fix the page leak
issue.

Fixes: d8c2237d0a ("io_uring: add io_pin_pages() helper")
Signed-off-by: Penglei Jiang <superman.xpt@gmail.com>
Link: https://lore.kernel.org/r/20250617165644.79165-1-superman.xpt@gmail.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-06-27 11:13:39 +01:00
..
advise.c
io_uring/advise: support 64-bit lengths
2024-06-16 14:54:55 -06:00
advise.h
io_uring: split out fadvise/madvise operations
2022-07-24 18:39:11 -06:00
alloc_cache.c
io_uring: add alloc_cache.c
2025-01-28 15:10:40 -07:00
alloc_cache.h
io_uring/net: convert to struct iou_vec
2025-03-07 13:41:08 -07:00
cancel.c
io_uring/cancel: add generic cancel helper
2025-02-17 05:34:45 -07:00
cancel.h
io_uring/cancel: add generic cancel helper
2025-02-17 05:34:45 -07:00
epoll.c
io_uring/epoll: add support for IORING_OP_EPOLL_WAIT
2025-02-20 07:59:56 -07:00
epoll.h
io_uring/epoll: add support for IORING_OP_EPOLL_WAIT
2025-02-20 07:59:56 -07:00
eventfd.c
io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
2025-01-09 07:16:45 -07:00
eventfd.h
io_uring/eventfd: move eventfd handling to separate file
2024-06-16 14:54:55 -06:00
fdinfo.c
io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()
2025-06-19 15:41:01 +02:00
fdinfo.h
io_uring: move fdinfo helpers to its own file
2022-07-24 18:39:12 -06:00
filetable.c
io_uring: cache nodes and mapped buffers
2025-02-28 07:05:46 -07:00
filetable.h
io_uring/rsrc: pass 'struct io_ring_ctx' reference to rsrc helpers
2024-11-07 15:24:33 -07:00
fs.c
io_uring/fs: consider link->flags when getting path for LINKAT
2023-11-20 09:01:42 -07:00
fs.h
io_uring: split out filesystem related operations
2022-07-24 18:39:11 -06:00
futex.c
io_uring: introduce io_cache_free() helper
2025-03-05 07:38:55 -07:00
futex.h
io_uring: move cancelations to be io_uring_task based
2024-11-06 13:55:38 -07:00
io_uring.c
io_uring: account drain memory to cgroup
2025-06-27 11:12:55 +01:00
io_uring.h
io_uring: don't pass ctx to tw add remote helper
2025-03-28 17:14:01 -06:00
io-wq.c
io_uring: fix task leak issue in io_wq_create()
2025-06-27 11:13:31 +01:00
io-wq.h
io_uring/io-wq: cache work->flags in variable
2025-02-17 05:34:45 -07:00
kbuf.c
io_uring/kbuf: don't truncate end buffer for multiple buffer peeks
2025-06-27 11:13:31 +01:00
kbuf.h
io_uring/kbuf: uninline __io_put_kbufs
2025-02-17 05:34:45 -07:00
Kconfig
io_uring: make zcrx depend on CONFIG_IO_URING
2025-03-31 07:07:44 -06:00
Makefile
io_uring/epoll: remove CONFIG_EPOLL guards
2025-02-20 07:59:56 -07:00
memmap.c
io_uring/memmap: don't use page_address() on a highmem page
2025-05-12 09:27:41 -06:00
memmap.h
io_uring/zcrx: add interface queue and refill queue
2025-02-17 05:41:03 -07:00
msg_ring.c
io_uring: don't pass ctx to tw add remote helper
2025-03-28 17:14:01 -06:00
msg_ring.h
io_uring/msg_ring: Drop custom destructor
2024-12-27 10:08:21 -07:00
napi.c
net: use napi_id_valid helper
2025-02-17 16:43:04 -08:00
napi.h
io_uring/napi: add static napi tracking strategy
2024-11-06 13:55:38 -07:00
net.c
io_uring/net: always use current transfer count for buffer put
2025-06-27 11:13:36 +01:00
net.h
io_uring/net: convert to struct iou_vec
2025-03-07 13:41:08 -07:00
nop.c
io_uring/nop: use io_find_buf_node()
2025-02-28 19:35:37 -07:00
nop.h
io_uring: move nop into its own file
2022-07-24 18:39:11 -06:00
notif.c
io_uring: introduce type alias for io_tw_state
2025-02-17 05:34:50 -07:00
notif.h
io_uring/notif: implement notification stacking
2024-04-22 19:31:18 -06:00
opdef.c
Merge tag 'for-6.15/io_uring-epoll-wait-20250325' of git://git.kernel.dk/linux
2025-03-28 14:55:32 -07:00
opdef.h
io_uring: rearrange opdef flags by use pattern
2025-02-27 07:27:56 -07:00
openclose.c
io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL
2024-01-23 15:25:14 -07:00
openclose.h
io_uring/openclose: add support for IORING_OP_FIXED_FD_INSTALL
2023-12-12 07:42:57 -07:00
poll.c
io_uring: unify STOP_MULTISHOT with IOU_OK
2025-03-10 07:14:18 -06:00
poll.h
io_uring: introduce type alias for io_tw_state
2025-02-17 05:34:50 -07:00
refs.h
io_uring: always do atomic put from iowq
2025-04-03 08:31:57 -06:00
register.c
io_uring: consistently use rcu semantics with sqpoll thread
2025-06-19 15:41:01 +02:00
register.h
io_uring: temporarily disable registered waits
2024-11-15 09:58:34 -07:00
rsrc.c
io_uring: fix potential page leak in io_sqe_buffer_register()
2025-06-27 11:13:39 +01:00
rsrc.h
Merge tag 'for-6.15/io_uring-rx-zc-20250325' of git://git.kernel.dk/linux
2025-03-28 13:45:52 -07:00
rw.c
Merge tag 'for-6.15/io_uring-reg-vec-20250327' of git://git.kernel.dk/linux
2025-03-28 15:07:04 -07:00
rw.h
io_uring/rw: implement vectored registered rw
2025-03-07 09:07:29 -07:00
slist.h
io_uring: silence variable ‘prev’ set but not used warning
2023-03-09 10:10:58 -07:00
splice.c
io_uring/rsrc: avoid NULL check in io_put_rsrc_node()
2025-02-17 05:34:46 -07:00
splice.h
io_uring/splice: open code 2nd direct file assignment
2024-10-29 13:43:28 -06:00
sqpoll.c
io_uring/sqpoll: don't put task_struct on tctx setup failure
2025-06-27 11:13:37 +01:00
sqpoll.h
io_uring: consistently use rcu semantics with sqpoll thread
2025-06-19 15:41:01 +02:00
statx.c
io_statx_prep(): use getname_uflags()
2024-11-13 11:44:30 -05:00
statx.h
io_uring: move statx handling to its own file
2022-07-24 18:39:11 -06:00
sync.c
io_uring: for requests that require async, force it
2023-01-29 15:18:26 -07:00
sync.h
io_uring: split out fs related sync/fallocate functions
2022-07-24 18:39:11 -06:00
tctx.c
io_uring/tctx: work around xa_store() allocation error issue
2024-11-29 07:20:28 -07:00
tctx.h
io_uring: simplify __io_uring_add_tctx_node
2022-10-07 12:25:30 -06:00
timeout.c
Merge tag 'for-6.15/io_uring-20250322' of git://git.kernel.dk/linux
2025-03-26 17:56:00 -07:00
timeout.h
io_uring: move cancelations to be io_uring_task based
2024-11-06 13:55:38 -07:00
truncate.c
io_uring: add support for ftruncate
2024-02-09 09:04:39 -07:00
truncate.h
io_uring: add support for ftruncate
2024-02-09 09:04:39 -07:00
uring_cmd.c
io_uring/uring_cmd: fix hybrid polling initialization issue
2025-05-12 07:17:02 -06:00
uring_cmd.h
io_uring/cmd: axe duplicate io_uring_cmd_import_fixed_vec() declaration
2025-05-20 14:36:41 -06:00
waitid.c
io_uring/waitid: use io_is_compat()
2025-02-24 12:10:38 -07:00
waitid.h
io_uring: move cancelations to be io_uring_task based
2024-11-06 13:55:38 -07:00
xattr.c
replace do_getxattr() with saner helpers.
2024-11-06 12:59:39 -05:00
xattr.h
io_uring: move xattr related opcodes to its own file
2022-07-24 18:39:11 -06:00
zcrx.c
io_uring/zcrx: fix late dma unmap for a dead dev
2025-04-18 06:12:10 -06:00
zcrx.h
io_uring/zcrx: fix late dma unmap for a dead dev
2025-04-18 06:12:10 -06:00