iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/kernel
History
Petr Tesarik ce7612496a swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC 
commit 53c87e846e335e3c18044c397cc35178163d7827 upstream.

Limit the free list length to the size of the IO TLB. Transient pool can be
smaller than IO_TLB_SEGSIZE, but the free list is initialized with the
assumption that the total number of slots is a multiple of IO_TLB_SEGSIZE.
As a result, swiotlb_area_find_slots() may allocate slots past the end of
a transient IO TLB buffer.

Reported-by: Niklas Schnelle <schnelle@linux.ibm.com>
Closes: https://lore.kernel.org/linux-iommu/104a8c8fedffd1ff8a2890983e2ec1c26bff6810.camel@linux.ibm.com/
Fixes: 79636caad361 ("swiotlb: if swiotlb is full, fall back to a transient memory pool")
Cc: stable@vger.kernel.org
Signed-off-by: Petr Tesarik <petr.tesarik1@huawei-partners.com>
Reviewed-by: Halil Pasic <pasic@linux.ibm.com>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-11-28 17:20:13 +00:00
..
bpf
bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END
2023-11-28 17:19:55 +00:00
cgroup
sched: psi: fix unprivileged polling against cgroups
2023-11-28 17:19:56 +00:00
configs
Kbuild updates for v6.6
2023-09-05 11:01:47 -07:00
debug
kgdb: Flush console before entering kgdb on panic
2023-11-28 17:19:47 +00:00
dma
swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC
2023-11-28 17:20:13 +00:00
entry
entry: Remove empty addr_limit_user_check()
2023-08-23 10:32:39 +02:00
events
perf/core: Fix cpuctx refcounting
2023-11-28 17:19:54 +00:00
futex
futex: Don't include process MM in futex key on no-MMU
2023-11-20 11:58:53 +01:00
gcov
gcov: shut up missing prototype warnings for internal stubs
2023-08-18 10:18:58 -07:00
irq
genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
2023-11-28 17:19:59 +00:00
kcsan
kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures
2023-06-09 23:29:50 +10:00
livepatch
livepatch: Fix missing newline character in klp_resolve_symbols()
2023-11-20 11:59:25 +01:00
locking
locking/ww_mutex/test: Fix potential workqueue corruption
2023-11-28 17:19:35 +00:00
module
module/decompress: use kvmalloc() consistently
2023-11-20 11:59:37 +01:00
power
PM: hibernate: Clean up sync_read handling in snapshot_write_next()
2023-11-28 17:20:02 +00:00
printk
Merge branch 'rework/misc-cleanups' into for-linus
2023-10-11 12:58:14 +02:00
rcu
rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects
2023-11-28 17:20:02 +00:00
sched
sched/core: Fix RQCF_ACT_SKIP leak
2023-11-28 17:19:59 +00:00
time
Fix false positive "softirq work is pending" messages on -rt
2023-09-02 09:01:48 -07:00
trace
tracing: fprobe-event: Fix to check tracepoint event and return
2023-11-28 17:20:13 +00:00
.gitignore
…
acct.c
audit/stable-6.6 PR 20230829
2023-08-30 08:17:35 -07:00
async.c
…
audit_fsnotify.c
…
audit_tree.c
…
audit_watch.c
audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
2023-11-28 17:19:56 +00:00
audit.c
audit: move trailing statements to next line
2023-08-15 18:16:14 -04:00
audit.h
audit: correct audit_filter_inodes() definition
2023-07-21 12:17:25 -04:00
auditfilter.c
audit: move trailing statements to next line
2023-08-15 18:16:14 -04:00
auditsc.c
audit,io_uring: io_uring openat triggers audit reference count underflow
2023-10-13 18:34:46 +02:00
backtracetest.c
…
bounds.c
mm: multi-gen LRU: minimal implementation
2022-09-26 19:46:09 -07:00
capability.c
lsm: constify the 'target' parameter in security_capget()
2023-08-08 16:48:47 -04:00
cfi.c
cfi: Switch to -fsanitize=kcfi
2022-09-26 10:13:13 -07:00
compat.c
sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
2023-03-14 19:32:38 -07:00
configs.c
…
context_tracking.c
locking/atomic: treewide: use raw_atomic*_<op>()
2023-06-05 09:57:20 +02:00
cpu_pm.c
cpuidle, cpu_pm: Remove RCU fiddling from cpu_pm_{enter,exit}()
2023-01-13 11:48:15 +01:00
cpu.c
cpu/hotplug: Don't offline the last non-isolated CPU
2023-11-28 17:19:36 +00:00
crash_core.c
Crash: add lock to serialize crash hotplug handling
2023-09-29 17:20:48 -07:00
crash_dump.c
…
cred.c
cred: convert printks to pr_<level>
2023-08-18 10:18:49 -07:00
delayacct.c
delayacct: track delays from IRQ/SOFTIRQ
2023-04-18 16:39:34 -07:00
dma.c
…
exec_domain.c
…
exit.c
fork, vhost: Use CLONE_THREAD to fix freezer/ps regression
2023-06-01 17:15:33 -04:00
extable.c
…
fail_function.c
kernel/fail_function: fix memory leak with using debugfs_lookup()
2023-02-08 13:36:22 +01:00
fork.c
percpu: changes for v6.6
2023-09-01 15:44:45 -07:00
freezer.c
…
gen_kheaders.sh
Revert "kheaders: substituting --sort in archive creation"
2023-05-28 16:20:21 +09:00
groups.c
…
hung_task.c
kernel/hung_task.c: set some hung_task.c variables storage-class-specifier to static
2023-04-08 13:45:37 -07:00
iomem.c
kernel/iomem.c: remove __weak ioremap_cache helper
2023-08-21 13:37:28 -07:00
irq_work.c
trace: Add trace_ipi_send_cpu()
2023-03-24 11:01:29 +01:00
jump_label.c
jump_label: Prevent key->enabled int overflow
2022-12-01 15:53:05 -08:00
kallsyms_internal.h
kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[]
2022-11-12 18:47:36 -08:00
kallsyms_selftest.c
Modules changes for v6.6-rc1
2023-08-29 17:32:32 -07:00
kallsyms_selftest.h
kallsyms: Add self-test facility
2022-11-15 00:42:02 -08:00
kallsyms.c
kallsyms: Change func signature for cleanup_symbol_name()
2023-08-25 15:00:36 -07:00
kcmp.c
…
Kconfig.freezer
…
Kconfig.hz
…
Kconfig.kexec
crash: hotplug support for kexec_load()
2023-08-24 16:25:14 -07:00
Kconfig.locks
…
Kconfig.preempt
…
kcov.c
kcov: add prototypes for helper functions
2023-06-09 17:44:17 -07:00
kexec_core.c
crash: add generic infrastructure for crash hotplug support
2023-08-24 16:25:13 -07:00
kexec_elf.c
…
kexec_file.c
integrity-v6.6
2023-08-30 09:16:56 -07:00
kexec_internal.h
…
kexec.c
kernel: kexec: copy user-array safely
2023-11-28 17:19:40 +00:00
kheaders.c
kheaders: Use array declaration instead of char
2023-03-24 20:10:59 -07:00
kprobes.c
kernel: kprobes: Use struct_size()
2023-08-23 09:38:17 +09:00
ksyms_common.c
kallsyms: make kallsyms_show_value() as generic function
2023-06-08 12:27:20 -07:00
ksysfs.c
crash: hotplug support for kexec_load()
2023-08-24 16:25:14 -07:00
kthread.c
kthread: unexport __kthread_should_park()
2023-08-18 10:18:59 -07:00
latencytop.c
…
Makefile
v6.5-rc1-modules-next
2023-06-28 15:51:08 -07:00
module_signature.c
…
notifier.c
notifiers: add tracepoints to the notifiers infrastructure
2023-04-08 13:45:38 -07:00
nsproxy.c
nsproxy: Convert nsproxy.count to refcount_t
2023-08-21 11:29:12 -07:00
padata.c
crypto: pcrypt - Fix hungtask for PADATA_RESET
2023-11-28 17:19:42 +00:00
panic.c
panic: Reenable preemption in WARN slowpath
2023-09-15 11:28:08 +02:00
params.c
kernel: params: Remove unnecessary ‘0’ values from err
2023-07-10 12:47:01 -07:00
pid_namespace.c
memfd: replace ratcheting feature from vm.memfd_noexec with hierarchy
2023-08-21 13:37:59 -07:00
pid_sysctl.h
memfd: replace ratcheting feature from vm.memfd_noexec with hierarchy
2023-08-21 13:37:59 -07:00
pid.c
pidfd: prevent a kernel-doc warning
2023-09-19 13:21:33 -07:00
profile.c
…
ptrace.c
ptrace: Provide set/get interface for syscall user dispatch
2023-04-16 14:23:07 +02:00
range.c
…
reboot.c
kernel/reboot: emergency_restart: Set correct system_state
2023-11-28 17:20:04 +00:00
regset.c
…
relay.c
kernel: relay: remove unnecessary NULL values from relay_open_buf
2023-08-18 10:18:55 -07:00
resource_kunit.c
…
resource.c
dax/kmem: Fix leak of memory-hotplug resources
2023-02-17 14:58:01 -08:00
rseq.c
rseq: Extend struct rseq with per-memory-map concurrency ID
2022-12-27 12:52:12 +01:00
scftorture.c
scftorture: Pause testing after memory-allocation failure
2023-07-14 15:02:57 -07:00
scs.c
scs: add support for dynamic shadow call stacks
2022-11-09 18:06:35 +00:00
seccomp.c
seccomp: Add missing kerndoc notations
2023-08-17 12:32:15 -07:00
signal.c
signal: print comm and exe name on fatal signals
2023-08-18 10:18:50 -07:00
smp.c
smp,csd: Throw an error if a CSD lock is stuck for too long
2023-11-28 17:19:36 +00:00
smpboot.c
cpu/hotplug: Remove unused state functions
2023-05-15 13:45:00 +02:00
smpboot.h
…
softirq.c
sched/core: introduce sched_core_idle_cpu()
2023-07-13 15:21:50 +02:00
stackleak.c
stackleak: allow to specify arch specific stackleak poison function
2023-04-20 11:36:35 +02:00
stacktrace.c
…
static_call_inline.c
static_call: Add call depth tracking support
2022-10-17 16:41:16 +02:00
static_call.c
…
stop_machine.c
…
sys_ni.c
x86/shstk: Introduce map_shadow_stack syscall
2023-08-02 15:01:51 -07:00
sys.c
prctl: move PR_GET_AUXV out of PR_MCE_KILL
2023-07-17 12:53:21 -07:00
sysctl-test.c
…
sysctl.c
v6.5-rc1-sysctl-next
2023-06-28 16:05:21 -07:00
task_work.c
task_work: add kerneldoc annotation for 'data' argument
2023-09-19 13:21:32 -07:00
taskstats.c
…
torture.c
rcutorture: Fix stuttering races and other issues
2023-11-28 17:20:08 +00:00
tracepoint.c
tracepoint: Allow livepatch module add trace event
2023-02-18 14:34:36 -05:00
tsacct.c
…
ucount.c
sysctl: Add size to register_sysctl
2023-08-15 15:26:17 -07:00
uid16.c
…
uid16.h
…
umh.c
sysctl: fix unused proc_cap_handler() function warning
2023-06-29 15:19:43 -07:00
up.c
…
user_namespace.c
userns: fix a struct's kernel-doc notation
2023-02-02 22:50:04 -08:00
user-return-notifier.c
…
user.c
kernel/user: Allow user_struct::locked_vm to be usable for iommufd
2022-11-30 20:16:49 -04:00
usermode_driver.c
…
utsname_sysctl.c
utsname: simplify one-level sysctl registration for uts_kern_table
2023-04-13 11:49:35 -07:00
utsname.c
…
vhost_task.c
vhost: Fix worker hangs due to missed wake up calls
2023-06-08 15:43:09 -04:00
watch_queue.c
kernel: watch_queue: copy user-array safely
2023-11-28 17:19:40 +00:00
watchdog_buddy.c
watchdog/hardlockup: move SMP barriers from common code to buddy code
2023-06-19 16:25:28 -07:00
watchdog_perf.c
watchdog/perf: add a weak function for an arch to detect if perf can use NMIs
2023-06-09 17:44:21 -07:00
watchdog.c
watchdog: move softlockup_panic back to early_param
2023-11-28 17:19:57 +00:00
workqueue_internal.h
workqueue: Drop the special locking rule for worker->flags and worker_pool->flags
2023-08-07 15:57:22 -10:00
workqueue.c
workqueue: Provide one lock class key per work_on_cpu() callsite
2023-11-28 17:19:36 +00:00