linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-16 22:39:48 +00:00

No description

C 96.9%
Assembly 0.9%
Rust 0.6%
Shell 0.6%
Python 0.5%
Other 0.3%

Find a file

Shigeru Yoshida 2b54e14535 virtio-blk: Avoid use-after-free on suspend/resume commit `8d12ec1029` upstream. hctx->user_data is set to vq in virtblk_init_hctx(). However, vq is freed on suspend and reallocated on resume. So, hctx->user_data is invalid after resume, and it will cause use-after-free accessing which will result in the kernel crash something like below: [ 22.428391] Call Trace: [ 22.428899] <TASK> [ 22.429339] virtqueue_add_split+0x3eb/0x620 [ 22.430035] ? __blk_mq_alloc_requests+0x17f/0x2d0 [ 22.430789] ? kvm_clock_get_cycles+0x14/0x30 [ 22.431496] virtqueue_add_sgs+0xad/0xd0 [ 22.432108] virtblk_add_req+0xe8/0x150 [ 22.432692] virtio_queue_rqs+0xeb/0x210 [ 22.433330] blk_mq_flush_plug_list+0x1b8/0x280 [ 22.434059] __blk_flush_plug+0xe1/0x140 [ 22.434853] blk_finish_plug+0x20/0x40 [ 22.435512] read_pages+0x20a/0x2e0 [ 22.436063] ? folio_add_lru+0x62/0xa0 [ 22.436652] page_cache_ra_unbounded+0x112/0x160 [ 22.437365] filemap_get_pages+0xe1/0x5b0 [ 22.437964] ? context_to_sid+0x70/0x100 [ 22.438580] ? sidtab_context_to_sid+0x32/0x400 [ 22.439979] filemap_read+0xcd/0x3d0 [ 22.440917] xfs_file_buffered_read+0x4a/0xc0 [ 22.441984] xfs_file_read_iter+0x65/0xd0 [ 22.442970] __kernel_read+0x160/0x2e0 [ 22.443921] bprm_execve+0x21b/0x640 [ 22.444809] do_execveat_common.isra.0+0x1a8/0x220 [ 22.446008] __x64_sys_execve+0x2d/0x40 [ 22.446920] do_syscall_64+0x37/0x90 [ 22.447773] entry_SYSCALL_64_after_hwframe+0x63/0xcd This patch fixes this issue by getting vq from vblk, and removes virtblk_init_hctx(). Fixes: `4e04005256` ("virtio-blk: support polling I/O") Cc: "Suwan Kim" <suwan.kim027@gmail.com> Signed-off-by: Shigeru Yoshida <syoshida@redhat.com> Message-Id: <20220810160948.959781-1-syoshida@redhat.com> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		History 2022-08-25 11:45:16 +02:00
arch	m68k: coldfire/device.c: protect FLEXCAN blocks	2022-08-25 11:45:15 +02:00
block	block: don't allow the same type rq_qos add more than once	2022-08-17 15:16:10 +02:00
certs	certs: make system keyring depend on x509 parser	2022-07-24 12:53:55 -07:00
crypto	KEYS: asymmetric: enforce SM2 signature use pkey algo	2022-08-17 15:16:17 +02:00
Documentation	Documentation: ACPI: EINJ: Fix obsolete example	2022-08-25 11:45:11 +02:00
drivers	virtio-blk: Avoid use-after-free on suspend/resume	2022-08-25 11:45:16 +02:00
fs	NFSv4/pnfs: Fix a use-after-free bug in open	2022-08-25 11:45:12 +02:00
include	SUNRPC: Don't reuse bvec on retransmission of the request	2022-08-25 11:45:15 +02:00
init	stack: Declare {randomize_,}kstack_offset to fix Sparse warnings	2022-08-17 15:14:14 +02:00
io_uring	io_uring: mem-account pbuf buckets	2022-08-17 15:16:21 +02:00
ipc	ipc: Free mq_sysctls if ipc namespace creation failed	2022-06-22 17:47:41 -05:00
kernel	bpf: Acquire map uref in .init_seq_private for hash map iterator	2022-08-25 11:45:14 +02:00
lib	crypto: lib/blake2s - reduce stack frame usage in self test	2022-08-17 15:16:19 +02:00
LICENSES	LICENSES/LGPL-2.1: Add LGPL-2.1-or-later as valid identifiers	2021-12-16 14:33:10 +01:00
mm	Revert "mm: kfence: apply kmemleak_ignore_phys on early allocated pool"	2022-08-21 15:20:08 +02:00
net	SUNRPC: Don't reuse bvec on retransmission of the request	2022-08-25 11:45:15 +02:00
samples	sample: bpf: xdp_router_ipv4: Allow the kernel to send arp requests	2022-08-17 15:14:25 +02:00
scripts	scripts/faddr2line: Fix vmlinux detection on arm64	2022-08-17 15:16:01 +02:00
security	apparmor: Fix memleak in aa_simple_write_to_buffer()	2022-08-25 11:45:11 +02:00
sound	ASoC: qdsp6: q6apm-dai: unprepare stream if its already prepared	2022-08-25 11:45:15 +02:00
tools	bpf: Disallow bpf programs call prog_run command.	2022-08-25 11:45:13 +02:00
usr	Not a lot of material this cycle. Many singleton patches against various	2022-05-27 11:22:03 -07:00
virt	KVM: Unconditionally get a ref to /dev/kvm module when creating a VM	2022-08-25 11:45:05 +02:00
.clang-format	clang-format: Fix space after for_each macros	2022-05-20 19:27:16 +02:00
.cocciconfig	scripts: add Linux .cocciconfig for coccinelle	2016-07-22 12:13:39 +02:00
.get_maintainer.ignore	Opt out of scripts/get_maintainer.pl	2019-05-16 10:53:40 -07:00
.gitattributes	.gitattributes: use 'dts' diff driver for dts files	2019-12-04 19:44:11 -08:00
.gitignore	kbuild: split the second line of .mod into .usyms	2022-05-08 03:16:59 +09:00
.mailmap	ARM: SoC fixes for 5.19, part 4	2022-07-27 09:43:07 -07:00
COPYING	COPYING: state that all contributions really are covered by this file	2020-02-10 13:32:20 -08:00
CREDITS	MAINTAINERS: mark ARM/PALM TREO SUPPORT orphan	2022-07-07 15:17:00 +02:00
Kbuild	kbuild: rename hostprogs-y/always to hostprogs/always-y	2020-02-04 01:53:07 +09:00
Kconfig	kbuild: ensure full rebuild when the compiler is updated	2020-05-12 13:28:33 +09:00
MAINTAINERS	io_uring: move to separate directory	2022-08-17 15:14:20 +02:00
Makefile	Linux 5.19.3	2022-08-21 15:20:09 +02:00
README	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.