Ming Lei 45b5a900d5 block: fix use-after-free in disk_part_iter_next ...

commit aebf5db917 upstream.

Make sure that bdgrab() is done on the 'block_device' instance before
referring to it for avoiding use-after-free.

Cc: <stable@vger.kernel.org>
Reported-by: syzbot+825f0f9657d4e528046e@syzkaller.appspotmail.com
Signed-off-by: Ming Lei <ming.lei@redhat.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-01-17 13:59:01 +01:00

..

partitions

…

badblocks.c

…

bfq-cgroup.c

block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group()

2020-04-02 16:34:15 +02:00

bfq-iosched.c

block, bfq: fix use-after-free in bfq_idle_slice_timer_body

2020-04-24 08:00:30 +02:00

bfq-iosched.h

…

bfq-wf2q.c

…

bio-integrity.c

block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed

2020-06-30 15:37:57 -04:00

bio.c

block: bio_iov_iter_get_pages: pin more pages for multi-segment IOs

2019-07-03 13:15:58 +02:00

blk-cgroup.c

blk-cgroup: Pre-allocate tree node on blkg_conf_prep

2020-11-10 10:29:05 +01:00

blk-core.c

block: ensure bdi->io_pages is always initialized

2020-09-12 13:39:11 +02:00

blk-exec.c

…

blk-flush.c

blk-mq: fix a hung issue when fsync

2019-02-20 10:20:44 +01:00

blk-integrity.c

…

blk-ioc.c

block: Fix use-after-free issue accessing struct io_cq

2020-04-24 08:00:28 +02:00

blk-lib.c

block: fix infinite loop if the device loses discard capability

2018-12-29 13:39:07 +01:00

blk-map.c

block: fix memleak when __blk_rq_map_user_iov() is failed

2020-01-12 12:12:00 +01:00

blk-merge.c

block: don't use bio->bi_vcnt to figure out segment number

2020-01-27 14:46:19 +01:00

blk-mq-cpumap.c

…

blk-mq-debugfs.c

…

blk-mq-debugfs.h

…

blk-mq-pci.c

…

blk-mq-rdma.c

…

blk-mq-sched.c

…

blk-mq-sched.h

…

blk-mq-sysfs.c

blk-mq: make sure that line break can be printed

2019-12-17 20:39:59 +01:00

blk-mq-tag.c

blk-mq: Allow blocking queue tag iter callbacks

2020-04-13 10:34:23 +02:00

blk-mq-tag.h

…

blk-mq-virtio.c

…

blk-mq.c

blk-mq: move _blk_mq_update_nr_hw_queues synchronize_rcu call

2020-06-20 10:25:17 +02:00

blk-mq.h

…

blk-settings.c

block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices

2020-04-24 08:00:26 +02:00

blk-softirq.c

…

blk-stat.c

…

blk-stat.h

…

blk-sysfs.c

blk-mq: move cancel of requeue_work to the front of blk_exit_queue

2019-10-05 12:47:37 +02:00

blk-tag.c

…

blk-throttle.c

…

blk-timeout.c

…

blk-wbt.c

…

blk-wbt.h

…

blk-zoned.c

…

blk.h

…

bounce.c

…

bsg-lib.c

…

bsg.c

…

cfq-iosched.c

…

cmdline-parser.c

…

compat_ioctl.c

compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE

2020-01-09 10:17:55 +01:00

deadline-iosched.c

…

elevator.c

elevator: lookup mq vs non-mq elevators

2018-12-21 14:13:10 +01:00

genhd.c

block: fix use-after-free in disk_part_iter_next

2021-01-17 13:59:01 +01:00

ioctl.c

…

ioprio.c

…

Kconfig

…

Kconfig.iosched

…

kyber-iosched.c

…

Makefile

…

mq-deadline.c

…

noop-iosched.c

…

opal_proto.h

…

partition-generic.c

…

scsi_ioctl.c

…

sed-opal.c

block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR

2019-05-31 06:47:29 -07:00

t10-pi.c

…