linux/fs/fuse
Al Viro 535e9bd0e8 fuse: fix UAF in rcu pathwalks
[ Upstream commit 053fc4f755 ]

->permission(), ->get_link() and ->inode_get_acl() might dereference
->s_fs_info (and, in case of ->permission(), ->s_fs_info->fc->user_ns
as well) when called from rcu pathwalk.

Freeing ->s_fs_info->fc is rcu-delayed; we need to make freeing ->s_fs_info
and dropping ->user_ns rcu-delayed too.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
History 2024-08-29 17:33:33 +02:00
..
acl.c fs.idmapped.v6.3 2023-02-20 11:53:11 -08:00
control.c fuse: convert to ctime accessor functions 2023-07-24 10:29:59 +02:00
cuse.c fuse: fix UAF in rcu pathwalks 2024-08-29 17:33:33 +02:00
dax.c fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() 2023-12-20 17:01:52 +01:00
dev.c fuse: Initialize beyond-EOF page contents before setting uptodate 2024-08-29 17:33:11 +02:00
dir.c fuse: fix leaked ENOSYS error on first statx call 2024-04-27 17:11:42 +02:00
file.c fuse: fix VM_MAYSHARE and direct_io_allow_mmap 2024-04-03 15:28:20 +02:00
fuse_i.h fuse: fix UAF in rcu pathwalks 2024-08-29 17:33:33 +02:00
inode.c fuse: fix UAF in rcu pathwalks 2024-08-29 17:33:33 +02:00
ioctl.c fuse: ioctl: translate ENOSYS in outarg 2023-06-21 11:17:36 +02:00
Kconfig dax: remove CONFIG_DAX_DRIVER 2021-12-04 08:58:51 -08:00
Makefile fuse: move ioctl to separate source file 2021-04-12 15:04:30 +02:00
readdir.c fuse: cache btime 2023-08-21 12:14:59 +02:00
virtio_fs.c dax: enable dax fault handler to report VM_FAULT_HWPOISON 2023-06-26 07:54:23 -06:00
xattr.c fs.idmapped.v6.3 2023-02-20 11:53:11 -08:00