Davidlohr Bueso 3cfcd119c1 block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) ...

commit e6a59aac8a upstream.

do_each_pid_thread(PIDTYPE_PGID) can race with a concurrent
change_pid(PIDTYPE_PGID) that can move the task from one hlist
to another while iterating. Serialize ioprio_get to take
the tasklist_lock in this case, just like it's set counterpart.

Fixes: d69b78ba1d (ioprio: grab rcu_read_lock in sys_ioprio_{set,get}())
Acked-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Davidlohr Bueso <dbueso@suse.de>
Link: https://lore.kernel.org/r/20211210182058.43417-1-dave@stgolabs.net
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-12-14 10:04:48 +01:00

..

partitions

partitions/aix: fix usage of uninitialized lv_info and lvname structures

2018-09-19 22:47:15 +02:00

badblocks.c

badblocks: fix wrong return value in badblocks_set if badblocks are disabled

2017-12-20 10:07:29 +01:00

bio-integrity.c

bio-integrity: Do not allocate integrity context for bio w/o data

2018-04-13 19:48:18 +02:00

bio.c

block: do not leak memory in bio_copy_user_iov()

2019-04-17 08:36:46 +02:00

blk-cgroup.c

block,blkcg: use __GFP_NOWARN for best-effort allocations in blkcg

2018-09-19 22:47:11 +02:00

blk-core.c

blktrace: Fix potential deadlock between delete & sysfs ops

2020-05-20 08:15:30 +02:00

blk-exec.c

…

blk-flush.c

…

blk-integrity.c

block: fix blk_integrity_register to use template's interval_exp if not 0

2017-05-20 14:28:36 +02:00

blk-ioc.c

…

blk-lib.c

block: fix infinite loop if the device loses discard capability

2018-12-29 13:40:14 +01:00

blk-map.c

block: fix memleak when __blk_rq_map_user_iov() is failed

2020-01-12 11:24:24 +01:00

blk-merge.c

block: don't use bio->bi_vcnt to figure out segment number

2020-01-29 10:24:15 +01:00

blk-mq-cpumap.c

…

blk-mq-pci.c

blk-mq-pci: add a fallback when pci_irq_get_affinity returns NULL

2017-08-24 17:12:20 -07:00

blk-mq-sysfs.c

blk-mq: make sure that line break can be printed

2019-12-21 10:42:18 +01:00

blk-mq-tag.c

blk-mq: Allow blocking queue tag iter callbacks

2020-04-13 10:32:52 +02:00

blk-mq-tag.h

…

blk-mq.c

blk-mq: move blk_mq_update_nr_hw_queues synchronize_rcu call

2020-06-20 10:24:19 +02:00

blk-mq.h

blk-mq: initialize mq kobjects in blk_mq_init_allocated_queue()

2017-12-14 09:28:21 +01:00

blk-settings.c

blk-settings: align max_sectors on "logical_block_size" boundary

2021-03-03 17:44:41 +01:00

blk-softirq.c

…

blk-sysfs.c

…

blk-tag.c

…

blk-throttle.c

blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()

2021-09-26 13:36:19 +02:00

blk-timeout.c

block: Fix a race between blk_cleanup_queue() and timeout handling

2017-11-30 08:39:06 +00:00

blk.h

…

bounce.c

…

bsg-lib.c

Revert "bsg-lib: don't free job in bsg_prepare_job"

2017-10-21 17:21:33 +02:00

bsg.c

sg_write()/bsg_write() is not fit to be called under KERNEL_DS

2017-01-09 08:32:25 +01:00

cfq-iosched.c

block,blkcg: use __GFP_NOWARN for best-effort allocations in blkcg

2018-09-19 22:47:11 +02:00

cmdline-parser.c

…

compat_ioctl.c

compat_ioctl: block: handle Persistent Reservations

2020-01-12 11:24:13 +01:00

deadline-iosched.c

…

elevator.c

…

genhd.c

block: fix use-after-free in disk_part_iter_next

2021-01-17 13:57:55 +01:00

ioctl.c

…

ioprio.c

block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)

2021-12-14 10:04:48 +01:00

Kconfig

…

Kconfig.iosched

…

Makefile

…

noop-iosched.c

…

partition-generic.c

block: fix an error code in add_partition()

2018-04-13 19:48:04 +02:00

scsi_ioctl.c

block: allow WRITE_SAME commands with the SG_IO ioctl

2017-03-22 12:43:38 +01:00

t10-pi.c

…