kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-18 19:12:56 +00:00
Code Issues Releases Packages Activity
linux/io_uring
History
Pavel Begunkov 18eae84200 io_uring: prevent opcode speculation 
[ Upstream commit 1e988c3fe1 ]

sqe->opcode is used for different tables, make sure we santitise it
against speculations.

Cc: stable@vger.kernel.org
Fixes: d3656344fe ("io_uring: add lookup table for various opcode needs")
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Reviewed-by: Li Zetao <lizetao1@huawei.com>
Link: https://lore.kernel.org/r/7eddbf31c8ca0a3947f8ed98271acc2b4349c016.1739568408.git.asml.silence@gmail.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
[ Use req->opcode instead of opcode here. ]
Signed-off-by: Robert Garcia <rob_garcia@163.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
History 2026-06-01 17:35:45 +02:00
..
io-wq.c io-wq: check that the predecessor is hashed in io_wq_remove_pending() 2026-06-01 17:35:45 +02:00
io-wq.h io_uring: break out of iowq iopoll on teardown 2023-09-19 12:22:54 +02:00
io_uring.c io_uring: prevent opcode speculation 2026-06-01 17:35:45 +02:00
Makefile io_uring: move to separate directory 2022-12-14 11:37:31 +01:00