iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Rik van Riel d48016d748 mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer 
commit f0362a253606e2031f8d61c74195d4d6556e12a4 upstream.

The code calling ima_free_kexec_buffer runs long after the memblock
allocator has already been torn down, potentially resulting in a use
after free in memblock_isolate_range.

With KASAN or KFENCE, this use after free will result in a BUG
from the idle task, and a subsequent kernel panic.

Switch ima_free_kexec_buffer over to memblock_free_late to avoid
that issue.

Fixes: fee3ff99bc67 ("powerpc: Move arch independent ima kexec functions to drivers/of/kexec.c")
Cc: stable@kernel.org
Signed-off-by: Rik van Riel <riel@surriel.com>
Suggested-by: Mike Rappoport <rppt@kernel.org>
Link: https://lore.kernel.org/r/20230817135759.0888e5ef@imladris.surriel.com
Signed-off-by: Rob Herring <robh@kernel.org>
Signed-off-by: Mike Rappoport (IBM) <rppt@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-08-30 16:18:22 +02:00
..
accessibility
…
acpi
ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
2023-08-03 10:22:46 +02:00
amba
…
android
binder: fix memory leak in binder_init()
2023-08-16 18:21:59 +02:00
ata
ata: pata_ns87415: mark ns87560_tf_read static
2023-08-03 10:22:39 +02:00
atm
atm: idt77252: fix kmemleak when rmmod idt77252
2023-03-30 12:47:48 +02:00
auxdisplay
auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()
2023-03-11 13:57:22 +01:00
base
PM: sleep: wakeirq: fix wake irq arming
2023-08-11 15:14:00 +02:00
bcma
…
block
rbd: prevent busy loop when requesting exclusive lock
2023-08-11 15:13:57 +02:00
bluetooth
Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
2023-08-26 14:23:25 +02:00
bus
bus: ti-sysc: Flush posted write on enable before reset
2023-08-26 14:23:35 +02:00
cdrom
…
char
tpm_tis: Explicitly check for error code
2023-08-03 10:22:44 +02:00
clk
clk: Fix slab-out-of-bounds error in devm_clk_release()
2023-08-30 16:18:16 +02:00
clocksource
clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
2023-07-23 13:46:45 +02:00
comedi
…
connector
…
counter
counter: 104-quad-8: Fix race condition between FLAG and CNTR reads
2023-04-26 13:51:55 +02:00
cpufreq
cpufreq: intel_pstate: Drop ACPI _PSS states table patching
2023-08-03 10:22:47 +02:00
cpuidle
cpuidle: psci: Iterate backwards over list in psci_pd_remove()
2023-03-22 13:31:36 +01:00
crypto
crypto: qat - unmap buffers before free for RSA
2023-07-23 13:47:16 +02:00
cxl
…
dax
dax/kmem: Pass valid argument to memory_group_register_static
2023-07-23 13:47:17 +02:00
dca
…
devfreq
…
dio
…
dma
dmaengine: mcf-edma: Fix a potential un-allocated memory access
2023-08-16 18:22:02 +02:00
dma-buf
dma-buf/sw_sync: Avoid recursive lock during fence signal
2023-08-30 16:18:21 +02:00
edac
EDAC/skx: Fix overflows on the DRAM row address mapping arrays
2023-05-11 23:00:20 +09:00
eisa
…
extcon
extcon: usbc-tusb320: Convert to i2c's .probe_new()
2023-07-23 13:47:31 +02:00
firewire
firewire: net: fix use after free in fwnet_finish_incoming_packet()
2023-08-26 14:23:24 +02:00
firmware
firmware: arm_scmi: Drop OF node reference in the transport channel setup
2023-08-11 15:13:56 +02:00
fpga
fpga: bridge: fix kernel-doc parameter description
2023-05-11 23:00:31 +09:00
fsi
…
gnss
…
gpio
gpio: mvebu: fix irq domain leak
2023-08-03 10:22:26 +02:00
gpu
drm/i915: Fix premature release of request's reusable memory
2023-08-30 16:18:20 +02:00
greybus
…
hid
HID: add quirk for 03f0:464a HP Elite Presenter Mouse
2023-08-26 14:23:23 +02:00
hsi
…
hv
Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
2023-06-28 10:29:42 +02:00
hwmon
hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
2023-08-16 18:21:58 +02:00
hwspinlock
…
hwtracing
coresight: Fix loss of connection info when a module is unloaded
2023-07-23 13:47:23 +02:00
i2c
i2c: designware: Handle invalid SMBus block data response length value
2023-08-26 14:23:32 +02:00
i3c
…
idle
…
iio
iio: addac: stx104: Fix race condition when converting analog-to-digital
2023-08-26 14:23:27 +02:00
infiniband
RDMA/mlx5: Return the firmware result upon destroying QP/RQ
2023-08-26 14:23:23 +02:00
input
Input: adxl34x - do not hardcode interrupt trigger type
2023-07-23 13:46:59 +02:00
interconnect
interconnect: qcom: osm-l3: fix icc_onecell_data allocation
2023-03-30 12:47:41 +02:00
iommu
iommu/arm-smmu-v3: Document nesting-related errata
2023-08-11 15:13:49 +02:00
ipack
…
irqchip
irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation
2023-08-03 10:22:45 +02:00
isdn
mISDN: Update parameter type of dsp_cmx_send()
2023-08-16 18:22:01 +02:00
leds
leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
2023-07-23 13:47:36 +02:00
macintosh
macintosh: via-pmu-led: requires ATA to be set
2023-05-11 23:00:34 +09:00
mailbox
mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
2023-07-23 13:47:28 +02:00
mcb
mcb-pci: Reallocate memory region to avoid memory overlapping
2023-05-24 17:36:47 +01:00
md
dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
2023-08-03 10:22:46 +02:00
media
media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
2023-08-30 16:18:18 +02:00
memory
memory: brcmstb_dpfe: fix testing array offset after use
2023-07-23 13:47:03 +02:00
memstick
memstick r592: make memstick_debug_get_tpc_name() static
2023-07-23 13:46:52 +02:00
message
scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
2023-05-24 17:36:45 +01:00
mfd
mfd: pm8008: Fix module autoloading
2023-07-23 13:47:51 +02:00
misc
misc: rtsx: judge ASPM Mode to set PETXCFG Reg
2023-08-16 18:21:59 +02:00
mmc
mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
2023-08-26 14:23:38 +02:00
most
…
mtd
mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
2023-08-11 15:13:59 +02:00
mux
…
net
ibmveth: Use dcbf rather than dcbfl
2023-08-30 16:18:16 +02:00
nfc
nfcsim.c: Fix error checking for debugfs_create_dir
2023-06-28 10:29:51 +02:00
ntb
NTB: ntb_tool: Add check for devm_kcalloc
2023-07-23 13:47:42 +02:00
nubus
nubus: Partially revert proc_create_single_data() conversion
2023-07-05 18:25:05 +01:00
nvdimm
…
nvme
nvme-rdma: fix potential unbalanced freeze & unfreeze
2023-08-16 18:22:03 +02:00
nvmem
nvmem: rmem: Use NVMEM_DEVID_AUTO
2023-07-23 13:47:25 +02:00
of
mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer
2023-08-30 16:18:22 +02:00
opp
opp: Fix use-after-free in lazy_opp_tables after probe deferral
2023-07-23 13:47:54 +02:00
parisc
parisc: Replace regular spinlock with spin_trylock on panic path
2023-05-24 17:36:48 +01:00
parport
…
pci
PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
2023-08-30 16:18:18 +02:00
pcmcia
pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
2023-08-26 14:23:24 +02:00
perf
perf/arm-cmn: Fix DTC reset
2023-07-23 13:46:46 +02:00
phy
phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
2023-08-03 10:22:34 +02:00
pinctrl
pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function}
2023-08-30 16:18:21 +02:00
platform
platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
2023-08-03 10:22:35 +02:00
pnp
…
power
power: supply: Fix logic checking if system is running from battery
2023-06-21 15:59:13 +02:00
powercap
powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
2023-07-23 13:46:46 +02:00
pps
…
ps3
…
ptp
ptp_qoriq: fix memory leak in probe()
2023-04-05 11:24:55 +02:00
pwm
pwm: meson: fix handling of period/duty if greater than UINT_MAX
2023-08-03 10:22:30 +02:00
rapidio
…
ras
…
regulator
regulator: core: Streamline debugfs operations
2023-07-23 13:46:50 +02:00
remoteproc
remoteproc: stm32_rproc: Add mutex protection for workqueue
2023-05-24 17:36:44 +01:00
reset
…
rpmsg
rpmsg: glink: Avoid infinite loop on intent for missing channel
2023-03-10 09:39:46 +01:00
rtc
rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
2023-07-23 13:47:27 +02:00
s390
scsi: zfcp: Defer fc_rport blocking until after ADISC response
2023-08-11 15:13:55 +02:00
sbus
…
scsi
scsi: core: raid_class: Remove raid_component_add()
2023-08-30 16:18:21 +02:00
sh
genirq: Add and use an irq_data_update_affinity helper
2023-03-11 13:57:31 +01:00
siox
…
slimbus
…
soc
soc: aspeed: socinfo: Add kfree for kstrdup
2023-08-26 14:23:36 +02:00
soundwire
soundwire: fix enumeration completion
2023-08-11 15:14:00 +02:00
spi
spi: bcm63xx: fix max prepend length
2023-07-27 08:46:58 +02:00
spmi
spmi: Add a check for remove callback when removing a SPMI driver
2023-05-11 23:00:34 +09:00
ssb
…
staging
staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
2023-08-03 10:22:43 +02:00
target
scsi: target: iscsi: Prevent login threads from racing between each other
2023-06-28 10:29:50 +02:00
tc
…
tee
tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta'
2023-06-14 11:13:06 +02:00
thermal
thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
2023-07-23 13:46:46 +02:00
thunderbolt
thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx()
2023-08-26 14:23:24 +02:00
tty
serial: 8250: Fix oops for port->pm on uart_change_pm()
2023-08-26 14:23:36 +02:00
uio
…
usb
USB: dwc3: fix use-after-free on core driver unbind
2023-08-26 14:23:29 +02:00
vdpa
vduse: Use proper spinlock for IRQ injection
2023-08-26 14:23:30 +02:00
vfio
vfio/type1: restore locked_vm
2023-03-10 09:40:13 +01:00
vhost
vhost_net: revert upend_idx only on retriable error
2023-06-28 10:29:53 +02:00
video
fbdev: fix potential OOB read in fast_imageblit()
2023-08-30 16:18:12 +02:00
virt
…
virtio
virtio-mmio: don't break lifecycle of vm_dev
2023-08-26 14:23:30 +02:00
visorbus
…
vlynq
…
vme
…
w1
w1: fix loop in w1_fini()
2023-07-23 13:47:20 +02:00
watchdog
watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
2023-08-26 14:23:25 +02:00
xen
xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
2023-05-30 13:55:32 +01:00
zorro
…
Kconfig
…
Makefile
…