Davidlohr Bueso 23047a238f block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) ...

commit e6a59aac8a upstream.

do_each_pid_thread(PIDTYPE_PGID) can race with a concurrent
change_pid(PIDTYPE_PGID) that can move the task from one hlist
to another while iterating. Serialize ioprio_get to take
the tasklist_lock in this case, just like it's set counterpart.

Fixes: d69b78ba1d (ioprio: grab rcu_read_lock in sys_ioprio_{set,get}())
Acked-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Davidlohr Bueso <dbueso@suse.de>
Link: https://lore.kernel.org/r/20211210182058.43417-1-dave@stgolabs.net
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-12-14 10:18:07 +01:00

..

partitions

…

badblocks.c

…

bfq-cgroup.c

…

bfq-iosched.c

Revert "block, bfq: honor already-setup queue merges"

2021-10-06 15:31:23 +02:00

bfq-iosched.h

…

bfq-wf2q.c

…

bio-integrity.c

…

bio.c

block: only update parent bi_status when bio fail

2021-04-16 11:49:30 +02:00

blk-cgroup.c

bdi: use bdi_dev_name() to get device name

2021-08-08 08:54:29 +02:00

blk-core.c

block: split .sysfs_lock into two locks

2021-03-04 09:39:30 +01:00

blk-exec.c

…

blk-flush.c

…

blk-integrity.c

…

blk-ioc.c

…

blk-iolatency.c

blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit()

2021-08-12 13:19:40 +02:00

blk-lib.c

…

blk-map.c

…

blk-merge.c

…

blk-mq-cpumap.c

…

blk-mq-debugfs-zoned.c

…

blk-mq-debugfs.c

…

blk-mq-debugfs.h

…

blk-mq-pci.c

…

blk-mq-rdma.c

…

blk-mq-sched.c

blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART

2020-09-03 11:24:26 +02:00

blk-mq-sched.h

…

blk-mq-sysfs.c

block: split .sysfs_lock into two locks

2021-03-04 09:39:30 +01:00

blk-mq-tag.c

…

blk-mq-tag.h

…

blk-mq-virtio.c

…

blk-mq.c

blk-mq: Swap two calls in blk_mq_exit_queue()

2021-05-22 10:59:46 +02:00

blk-mq.h

…

blk-rq-qos.c

…

blk-rq-qos.h

…

blk-settings.c

blk-settings: align max_sectors on "logical_block_size" boundary

2021-03-04 09:39:51 +01:00

blk-softirq.c

…

blk-stat.c

…

blk-stat.h

…

blk-sysfs.c

block: don't release queue's sysfs lock during switching elevator

2021-03-04 09:39:30 +01:00

blk-tag.c

…

blk-throttle.c

blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()

2021-09-26 13:39:49 +02:00

blk-timeout.c

…

blk-wbt.c

blk-wbt: make sure throttle is enabled properly

2021-07-20 16:15:48 +02:00

blk-wbt.h

blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled()

2021-07-20 16:15:48 +02:00

blk-zoned.c

blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN

2021-09-22 11:47:57 +02:00

blk.h

block: split .sysfs_lock into two locks

2021-03-04 09:39:30 +01:00

bounce.c

…

bsg-lib.c

…

bsg.c

…

cfq-iosched.c

…

cmdline-parser.c

…

compat_ioctl.c

…

deadline-iosched.c

…

elevator.c

block: don't release queue's sysfs lock during switching elevator

2021-03-04 09:39:30 +01:00

genhd.c

block: Suppress uevent for hidden device when removed

2021-03-30 14:36:59 +02:00

ioctl.c

…

ioprio.c

block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)

2021-12-14 10:18:07 +01:00

Kconfig

…

Kconfig.iosched

…

kyber-iosched.c

…

Makefile

…

mq-deadline.c

…

noop-iosched.c

…

opal_proto.h

…

partition-generic.c

…

scsi_ioctl.c

…

sed-opal.c

…

t10-pi.c

…