Al Viro 8cafd7266f __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ...

[ Upstream commit 250cf36930 ]

... or we risk stealing final mntput from sync umount - raising mnt_count
after umount(2) has verified that victim is not busy, but before it
has set MNT_SYNC_UMOUNT; in that case __legitimize_mnt() doesn't see
that it's safe to quietly undo mnt_count increment and leaves dropping
the reference to caller, where it'll be a full-blown mntput().

Check under mount_lock is needed; leaving the current one done before
taking that makes no sense - it's nowhere near common enough to bother
with.

Reviewed-by: Christian Brauner <brauner@kernel.org>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-05-29 11:03:13 +02:00

..

9p

fs/9p: fix NULL pointer dereference on mkdir

2025-04-10 14:39:32 +02:00

adfs

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

affs

affs: don't write overlarge OFS data block size fields

2025-04-10 14:39:29 +02:00

afs

afs: Give an afs_server object a ref on the afs_cell object it points to

2025-03-07 18:25:29 +01:00

autofs

autofs: fix thinko in validate_dev_ioctl()

2024-10-28 13:16:56 +01:00

bcachefs

bcachefs: Remove incorrect __counted_by annotation

2025-05-09 09:50:49 +02:00

befs

…

bfs

…

btrfs

btrfs: avoid NULL pointer dereference if no valid csum tree

2025-05-29 11:03:12 +02:00

cachefiles

cachefiles: Parse the "secctx" immediately

2025-01-23 17:22:55 +01:00

ceph

ceph: Fix incorrect flush end position calculation

2025-05-02 07:58:58 +02:00

coda

…

configfs

…

cramfs

…

crypto

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

debugfs

[tree-wide] finally take no_llseek out

2024-09-27 08:18:43 -07:00

devpts

…

dlm

dlm: make tcp still work in multi-link env

2025-05-29 11:02:14 +02:00

ecryptfs

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

efivarfs

efivarfs: Fix error on non-existent file

2024-12-27 14:02:07 +01:00

efs

efs: fix the efs new mount api implementation

2024-12-05 14:01:10 +01:00

erofs

erofs: initialize decompression early

2025-05-29 11:02:16 +02:00

exfat

exfat: call bh_read in get_block only when necessary

2025-05-29 11:02:03 +02:00

exportfs

…

ext2

…

ext4

ext4: remove writable userspace mappings before truncating page cache

2025-05-29 11:02:58 +02:00

f2fs

f2fs: introduce f2fs_base_attr for global sysfs entries

2025-05-29 11:03:00 +02:00

fat

fat: fix uninitialized variable

2024-10-17 00:28:06 -07:00

freevxfs

…

fuse

fuse: Return EPERM rather than ENOSYS from link()

2025-05-29 11:02:03 +02:00

gfs2

gfs2: Check for empty queue in run_queue

2025-05-29 11:02:24 +02:00

hfs

hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key

2025-04-25 10:47:52 +02:00

hfsplus

hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key

2025-04-25 10:47:52 +02:00

hostfs

um: hostfs: avoid issues on inode number reuse by host

2025-04-10 14:39:25 +02:00

hpfs

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

hugetlbfs

mm: use aligned address in clear_gigantic_page()

2024-12-27 14:02:20 +01:00

iomap

iomap: skip unnecessary ifs_block_is_uptodate check

2025-05-02 07:59:27 +02:00

isofs

isofs: Prevent the use of too small fid

2025-04-25 10:47:52 +02:00

jbd2

jbd2: do not try to recover wiped journal

2025-05-29 11:02:16 +02:00

jffs2

jffs2: Fix rtime decompressor

2024-12-14 20:04:14 +01:00

jfs

jfs: add sanity check for agwidth in dbMount

2025-04-20 10:15:19 +02:00

kernfs

…

lockd

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

minix

…

netfs

netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS

2025-05-02 07:59:26 +02:00

nfs

pNFS/flexfiles: Report ENETDOWN as a connection error

2025-05-29 11:02:08 +02:00

nfs_common

nfs: fix incorrect error handling in LOCALIO

2025-02-08 09:57:59 +01:00

nfsd

nfsd: decrease sc_count directly if fail to queue dl_recall

2025-04-25 10:47:51 +02:00

nilfs2

nilfs2: fix possible int overflows in nilfs_fiemap()

2025-02-17 10:05:39 +01:00

nls

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

notify

fs: relax assertions on failure to encode file handles

2025-01-17 13:40:46 +01:00

ntfs3

fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size

2025-05-02 07:59:17 +02:00

ocfs2

fs/ocfs2: use sleeping version of __find_get_block()

2025-05-29 11:02:00 +02:00

omfs

…

openpromfs

…

orangefs

orangefs: Do not truncate file size

2025-05-29 11:02:28 +02:00

overlayfs

ovl: don't allow datadir only

2025-04-25 10:47:53 +02:00

proc

fs/procfs: fix the comment above proc_pid_wchan()

2025-04-10 14:39:26 +02:00

pstore

pstore: Change kmsg_bytes storage size to u32

2025-05-29 11:02:58 +02:00

qnx4

…

qnx6

fs/qnx6: Fix building with GCC 15

2025-01-23 17:22:55 +01:00

quota

quota: flush quota_release_work upon quota writeback

2024-12-09 10:40:55 +01:00

ramfs

…

reiserfs

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

romfs

…

smb

cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function

2025-05-29 11:03:11 +02:00

squashfs

Squashfs: fix variable overflow in squashfs_readpage_block

2024-10-30 20:14:12 -07:00

sysfs

…

sysv

…

tests

…

tracefs

tracing: Fix tracefs mount options

2024-11-01 08:38:14 -04:00

ubifs

ubifs: skip dumping tnc tree when zroot is null

2025-02-08 09:58:01 +01:00

udf

udf: Make sure i_lenExtents is uptodate on inode eviction

2025-05-22 14:29:44 +02:00

ufs

ufs_rename(): fix bogus argument of folio_release_kmap()

2024-10-02 00:05:09 -04:00

unicode

Revert "unicode: Don't special case ignorable code points"

2024-12-14 20:04:13 +01:00

vboxsf

vboxsf: fix building with GCC 15

2025-03-22 12:54:15 -07:00

verity

…

xfs

xfs: flush inodegc before swapon

2025-05-02 07:59:29 +02:00

zonefs

Merge tag 'zonefs-6.12-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/dlemoal/zonefs

2024-10-02 12:02:15 -07:00

aio.c

…

anon_inodes.c

…

attr.c

…

backing-file.c

fs: pass offset and result to backing_file end_write() callback

2024-10-16 13:17:45 +02:00

bad_inode.c

…

binfmt_elf_fdpic.c

Revert "fs: don't block i_writecount during exec"

2024-12-05 14:02:50 +01:00

binfmt_elf.c

binfmt_elf: Move brk for static PIE even if ASLR disabled

2025-05-22 14:29:35 +02:00

binfmt_flat.c

binfmt_flat: Fix integer overflow bug on 32 bit systems

2025-02-17 10:05:04 +01:00

binfmt_misc.c

Revert "fs: don't block i_writecount during exec"

2024-12-05 14:02:50 +01:00

binfmt_script.c

…

bpf_fs_kfuncs.c

…

buffer.c

fs/buffer: use sleeping version of __find_get_block()

2025-05-29 11:02:00 +02:00

char_dev.c

…

compat_binfmt_elf.c

…

coredump.c

coredump: Only sort VMAs when core_sort_vma sysctl is set

2025-03-13 13:02:01 +01:00

d_path.c

…

dax.c

fsdax: dax_unshare_iter needs to copy entire blocks

2024-10-07 13:51:47 +02:00

dcache.c

…

direct-io.c

…

drop_caches.c

…

eventfd.c

…

eventpoll.c

epoll: Add synchronous wakeup support for ep_poll_callback

2024-12-27 14:02:20 +01:00

exec.c

exec: fix the racy usage of fs_struct->in_exec

2025-04-10 14:39:40 +02:00

fcntl.c

fcntl: make F_DUPFD_QUERY associative

2024-12-05 14:02:47 +01:00

fhandle.c

…

file_table.c

fs: fix proc_handler for sysctl_nr_open

2025-02-08 09:56:50 +01:00

file.c

fs: consistently deref the files table with rcu_dereference_raw()

2025-04-20 10:15:10 +02:00

filesystems.c

…

fs_context.c

…

fs_parser.c

…

fs_pin.c

…

fs_struct.c

…

fs_types.c

…

fs-writeback.c

fs/writeback: convert wbc_account_cgroup_owner to take a folio

2025-01-17 13:40:33 +01:00

fsopen.c

[tree-wide] finally take no_llseek out

2024-09-27 08:18:43 -07:00

init.c

…

inode.c

bcachefs: do not use PF_MEMALLOC_NORECLAIM

2024-10-09 12:47:18 -07:00

internal.h

…

ioctl.c

…

Kconfig

nfs: add missing selections of CONFIG_CRC32

2025-04-25 10:47:50 +02:00

Kconfig.binfmt

…

kernel_read_file.c

…

libfs.c

libfs: Fix duplicate directory entry in offset_dir_lookup

2025-03-28 22:03:28 +01:00

locks.c

…

Makefile

…

mbcache.c

…

mnt_idmapping.c

Merge tag 'fuse-update-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse

2024-09-24 15:29:42 -07:00

mount.h

fs: kill MNT_ONRB

2025-01-17 13:40:50 +01:00

mpage.c

fs/writeback: convert wbc_account_cgroup_owner to take a folio

2025-01-17 13:40:33 +01:00

namei.c

fuse: don't truncate cached, mutated symlink

2025-03-22 12:54:20 -07:00

namespace.c

__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock

2025-05-29 11:03:13 +02:00

nsfs.c

[tree-wide] finally take no_llseek out

2024-09-27 08:18:43 -07:00

open.c

openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)

2024-10-10 12:09:03 +02:00

pidfs.c

pidfs: improve multi-threaded exec and premature thread-group leader exit polling

2025-05-29 11:02:09 +02:00

pipe.c

[tree-wide] finally take no_llseek out

2024-09-27 08:18:43 -07:00

pnode.c

…

pnode.h

…

posix_acl.c

…

proc_namespace.c

…

read_write.c

fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid()

2024-12-05 14:01:11 +01:00

readdir.c

…

remap_range.c

…

select.c

select: Fix unbalanced user_access_end()

2025-02-08 09:56:53 +01:00

seq_file.c

…

signalfd.c

…

splice.c

splice: remove duplicate noinline from pipe_clear_nowait

2025-05-02 07:59:04 +02:00

stack.c

…

stat.c

…

statfs.c

…

super.c

fs/super.c: introduce get_tree_bdev_flags()

2024-10-21 14:30:26 +02:00

sync.c

…

sysctls.c

…

timerfd.c

…

userfaultfd.c

mm/userfaultfd: fix uninitialized output field for -EAGAIN race

2025-05-18 08:24:52 +02:00

utimes.c

…

xattr.c

fs/xattr.c: fix simple_xattr_list to always include security.* xattrs

2025-05-22 14:29:34 +02:00