linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-11-08 18:57:22 +00:00

No description

C 96.8%
Assembly 0.9%
Rust 0.7%
Shell 0.6%
Python 0.5%
Other 0.3%

Find a file

Zhihao Cheng 69f9ae7edf ovl: fix null pointer dereference in ovl_permission() commit `1a73f5b8f0` upstream. Following process: P1 P2 path_lookupat link_path_walk inode_permission ovl_permission ovl_i_path_real(inode, &realpath) path->dentry = ovl_i_dentry_upper(inode) drop_cache __dentry_kill(ovl_dentry) iput(ovl_inode) ovl_destroy_inode(ovl_inode) dput(oi->__upperdentry) dentry_kill(upperdentry) dentry_unlink_inode upperdentry->d_inode = NULL realinode = d_inode(realpath.dentry) // return NULL inode_permission(realinode) inode->i_sb // NULL pointer dereference , will trigger an null pointer dereference at realinode: [ 335.664979] BUG: kernel NULL pointer dereference, address: 0000000000000002 [ 335.668032] CPU: 0 PID: 2592 Comm: ls Not tainted 6.3.0 [ 335.669956] RIP: 0010:inode_permission+0x33/0x2c0 [ 335.678939] Call Trace: [ 335.679165] <TASK> [ 335.679371] ovl_permission+0xde/0x320 [ 335.679723] inode_permission+0x15e/0x2c0 [ 335.680090] link_path_walk+0x115/0x550 [ 335.680771] path_lookupat.isra.0+0xb2/0x200 [ 335.681170] filename_lookup+0xda/0x240 [ 335.681922] vfs_statx+0xa6/0x1f0 [ 335.682233] vfs_fstatat+0x7b/0xb0 Fetch a reproducer in [Link]. Use the helper ovl_i_path_realinode() to get realinode and then do non-nullptr checking. Link: https://bugzilla.kernel.org/show_bug.cgi?id=217405 Fixes: `4b7791b2e9` ("ovl: handle idmappings in ovl_permission()") Cc: <stable@vger.kernel.org> # v5.19 Signed-off-by: Zhihao Cheng <chengzhihao1@huawei.com> Suggested-by: Christian Brauner <brauner@kernel.org> Suggested-by: Amir Goldstein <amir73il@gmail.com> Signed-off-by: Amir Goldstein <amir73il@gmail.com> Signed-off-by: Miklos Szeredi <mszeredi@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		History 2023-07-19 16:37:00 +02:00
arch	powerpc/vdso: Include CLANG_FLAGS explicitly in ldflags-y	2023-07-19 16:36:59 +02:00
block	blk-throttle: Fix io statistics for cgroup v1	2023-07-19 16:36:40 +02:00
certs	KEYS: Add missing function documentation	2023-04-24 16:15:52 +03:00
crypto	crypto: jitter - correct health test during initialization	2023-07-19 16:36:19 +02:00
Documentation	fs: Lock moved directories	2023-07-19 16:36:55 +02:00
drivers	Input: ads7846 - fix pointer cast warning	2023-07-19 16:36:59 +02:00
fs	ovl: fix null pointer dereference in ovl_permission()	2023-07-19 16:37:00 +02:00
include	blktrace: use inline function for blk_trace_remove() while blktrace is disabled	2023-07-19 16:36:59 +02:00
init	kbuild: Fix CFI failures with GCOV	2023-07-19 16:36:23 +02:00
io_uring	io_uring: wait interruptibly for request completions on exit	2023-07-19 16:36:51 +02:00
ipc	Merge branch 'work.namespace' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2023-02-24 19:20:07 -08:00
kernel	watch_queue: prevent dangling pipe pointer	2023-07-19 16:36:53 +02:00
lib	lib: dhry: fix sleeping allocations inside non-preemptable section	2023-07-19 16:36:50 +02:00
LICENSES	LICENSES: Add the copyleft-next-0.3.1 license	2022-11-08 15:44:01 +01:00
mm	shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs	2023-07-19 16:36:54 +02:00
net	ipvs: increase ip_vs_conn_tab_bits range for 64BIT	2023-07-19 16:36:55 +02:00
rust	Rust changes for v6.4	2023-04-30 11:20:22 -07:00
samples	samples/bpf: xdp1 and xdp2 reduce XDPBUFSIZE to 60	2023-07-19 16:35:25 +02:00
scripts	kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS	2023-07-19 16:37:00 +02:00
security	integrity: Fix possible multiple allocation in integrity_inode_get()	2023-07-19 16:36:53 +02:00
sound	ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path	2023-07-19 16:36:58 +02:00
tools	tools/virtio: fix build break for aarch64	2023-07-19 16:36:41 +02:00
usr	initramfs: Check negative timestamp to prevent broken cpio archive	2023-04-16 17:37:01 +09:00
virt	KVM: Avoid illegal stage2 mapping on invalid memory slot	2023-06-22 15:14:57 -04:00
.clang-format	cxl for v6.4	2023-04-30 11:51:51 -07:00
.cocciconfig	scripts: add Linux .cocciconfig for coccinelle	2016-07-22 12:13:39 +02:00
.get_maintainer.ignore	get_maintainer: add Alan to .get_maintainer.ignore	2022-08-20 15:17:44 -07:00
.gitattributes	.gitattributes: use 'dts' diff driver for *.dtso files	2023-02-26 15:28:23 +09:00
.gitignore	linux-kselftest-kunit-6.4-rc1	2023-04-24 12:31:32 -07:00
.mailmap	mailmap: add entries for Ben Dooks	2023-06-19 13:19:35 -07:00
.rustfmt.toml	rust: add `.rustfmt.toml`	2022-09-28 09:02:20 +02:00
COPYING	COPYING: state that all contributions really are covered by this file	2020-02-10 13:32:20 -08:00
CREDITS	MAINTAINERS: sctp: move Neil to CREDITS	2023-05-12 08:51:32 +01:00
Kbuild	Kbuild updates for v6.1	2022-10-10 12:00:45 -07:00
Kconfig	kbuild: ensure full rebuild when the compiler is updated	2020-05-12 13:28:33 +09:00
MAINTAINERS	Networking fixes for 6.4-rc8, including fixes from ipsec, bpf,	2023-06-22 17:59:51 -07:00
Makefile	Linux 6.4.3	2023-07-11 06:31:05 +02:00
README	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.