Christophe Leroy 08f6c05feb bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() ...

[ Upstream commit e60adf513275c3a38e5cb67f7fd12387e43a3ff5 ]

set_memory_rox() can fail, leaving memory unprotected.

Check return and bail out when bpf_jit_binary_lock_ro() returns
an error.

Link: https://github.com/KSPP/linux/issues/7
Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
Cc: linux-hardening@vger.kernel.org <linux-hardening@vger.kernel.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Puranjay Mohan <puranjay12@gmail.com>
Reviewed-by: Ilya Leoshkevich <iii@linux.ibm.com>  # s390x
Acked-by: Tiezhu Yang <yangtiezhu@loongson.cn>  # LoongArch
Reviewed-by: Johan Almbladh <johan.almbladh@anyfinetworks.com> # MIPS Part
Message-ID: <036b6393f23a2032ce75a1c92220b2afcb798d5d.1709850515.git.christophe.leroy@csgroup.eu>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-07-05 09:33:50 +02:00

..

alpha

vgacon: rework screen_info #ifdef checks

2024-06-27 13:49:15 +02:00

arc

ARC: [plat-hsdk]: Remove misplaced interrupt-cells property

2024-05-02 16:32:33 +02:00

arm

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

2024-07-05 09:33:50 +02:00

arm64

arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc

2024-06-27 13:49:13 +02:00

csky

kprobe/ftrace: bail out if ftrace was killed

2024-06-27 13:49:03 +02:00

hexagon

hexagon: vmlinux.lds.S: handle attributes section

2024-04-03 15:28:55 +02:00

ia64

vgacon: rework screen_info #ifdef checks

2024-06-27 13:49:15 +02:00

loongarch

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

2024-07-05 09:33:50 +02:00

m68k

m68k: mac: Fix reboot hang on Mac IIci

2024-06-12 11:11:51 +02:00

microblaze

microblaze: Remove early printk call from cpuinfo-static.c

2024-06-12 11:12:23 +02:00

mips

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

2024-07-05 09:33:50 +02:00

nios2

mm: Introduce flush_cache_vmap_early()

2024-02-16 19:10:52 +01:00

openrisc

openrisc: traps: Don't send signals to kernel mode threads

2024-06-12 11:11:42 +02:00

parisc

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

2024-07-05 09:33:50 +02:00

powerpc

powerpc/bpf: use bpf_jit_binary_pack_[alloc|finalize|free]

2024-07-05 09:33:50 +02:00

riscv

vgacon: rework screen_info #ifdef checks

2024-06-27 13:49:15 +02:00

s390

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

2024-07-05 09:33:50 +02:00

sh

Revert "sh: Handle calling csum_partial with misaligned data"

2024-06-12 11:11:48 +02:00

sparc

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

2024-07-05 09:33:50 +02:00

um

um: Fix the declaration of kasan_map_memory

2024-06-12 11:12:42 +02:00

x86

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

2024-07-05 09:33:50 +02:00

xtensa

xtensa: fix MAKE_PC_FROM_RA second argument

2024-05-17 12:02:32 +02:00

.gitignore

…

Kconfig

Revert "mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default"

2024-06-27 13:49:15 +02:00