Pavel Begunkov 87e9eef43c io_uring: prevent opcode speculation ...

commit 1e988c3fe1 upstream.

sqe->opcode is used for different tables, make sure we santitise it
against speculations.

Cc: stable@vger.kernel.org
Fixes: d3656344fe ("io_uring: add lookup table for various opcode needs")
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Reviewed-by: Li Zetao <lizetao1@huawei.com>
Link: https://lore.kernel.org/r/7eddbf31c8ca0a3947f8ed98271acc2b4349c016.1739568408.git.asml.silence@gmail.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
[ Alexey: Sanitize req->opcode directly because io_init_req() in
  linux-5.10.y has no local opcode variable and subsequent lookups use it. ]
Signed-off-by: Alexey Panov <apanov@astralinux.ru>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-06-19 13:21:35 +02:00

..

io_uring.c

io_uring: prevent opcode speculation

2026-06-19 13:21:35 +02:00

io-wq.c

io-wq: check that the predecessor is hashed in io_wq_remove_pending()

2026-06-01 17:29:49 +02:00

io-wq.h

io_uring: break out of iowq iopoll on teardown

2023-09-19 12:20:23 +02:00

Makefile

…