Christian Brauner 19d6240745 pidfd: refuse access to tasks that have started exiting harder ...

commit 62c4d31d78 upstream.

The recent ptrace fix closed a hole where someone could rely on task->mm
becoming NULL during do_exit() to bypass dumpability checks. This api
here leans on on the very same check and so inherits the fix.

But there is no good reason to let it succeed at all once the target has
entered do_exit(). PF_EXITING is set by exit_signals() at the very top
of do_exit(), before exit_mm() and exit_files() run. Once we observe it,
the task is committed to dying and exit_files() will release the fdtable
shortly.

Fixes: 8649c322f7 ("pid: Implement pidfd_getfd syscall")
Cc: stable@vger.kernel.org
Link: https://patch.msgid.link/20260518-obgleich-petersilie-2d77ccccf9b9@brauner
Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-06-19 13:21:38 +02:00

..

bpf

bpf: fix end-of-list detection in cgroup_storage_get_next_key()

2026-06-01 17:29:30 +02:00

cgroup

cgroup/rdma: fix integer overflow in rdmacg_try_charge()

2026-06-01 17:29:41 +02:00

configs

…

debug

kdb: Do not assume write() callback available

2025-03-13 12:47:22 +01:00

dma

dma/pool: distinguish between missing and exhausted atomic pools

2026-02-06 16:40:11 +01:00

entry

…

events

x86/uprobes: Fix XOL allocation failure for 32-bit tasks

2026-06-01 17:29:15 +02:00

futex

futex: Clear stale exiting pointer in futex_lock_pi() retry path

2026-04-18 10:31:08 +02:00

gcov

gcov: add support for GCC 15

2025-12-07 06:08:19 +09:00

irq

genirq: Provide new interfaces for affinity hints

2025-10-02 13:35:39 +02:00

kcsan

kcsan: Turn report_filterlist_lock into a raw_spinlock

2024-12-14 19:48:25 +01:00

livepatch

livepatch: Match old_sympos 0 and 1 in klp_find_func()

2026-01-19 13:11:41 +01:00

locking

locking/spinlock/debug: Fix data-race in do_raw_write_lock

2026-01-19 13:11:25 +01:00

power

PM: sleep: console: Fix the black screen issue

2025-08-28 16:22:41 +02:00

printk

printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

2025-03-13 12:47:01 +01:00

rcu

rcu: Protect ->defer_qs_iw_pending from data race

2025-08-28 16:22:42 +02:00

sched

sched: idle: Consolidate the handling of two special cases

2026-04-18 10:31:02 +02:00

time

time: Fix off-by-one in settimeofday() usec validation

2026-06-19 13:21:35 +02:00

trace

tracing: Avoid NULL return from hist_field_name() on truncation

2026-06-01 17:29:57 +02:00

.gitignore

…

acct.c

acct: perform last write from workqueue

2025-03-13 12:47:35 +01:00

async.c

…

audit_fsnotify.c

fsnotify: make allow_dups a property of the group

2024-06-21 14:53:39 +02:00

audit_tree.c

fsnotify: pass flags argument to fsnotify_alloc_group()

2024-06-21 14:53:39 +02:00

audit_watch.c

fsnotify: pass flags argument to fsnotify_alloc_group()

2024-06-21 14:53:39 +02:00

audit.c

audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV

2026-06-01 17:29:47 +02:00

audit.h

…

auditfilter.c

ima: Avoid blocking in RCU read-side critical section

2024-07-18 13:05:44 +02:00

auditsc.c

audit: fix incorrect inheritable capability in CAPSET records

2026-06-01 17:29:47 +02:00

backtracetest.c

…

bounds.c

bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS

2024-05-02 16:23:46 +02:00

capability.c

…

compat.c

…

configs.c

…

context_tracking.c

…

cpu_pm.c

…

cpu.c

hrtimers: Handle CPU state correctly on hotplug

2025-02-01 18:22:29 +01:00

crash_core.c

…

crash_dump.c

…

cred.c

…

delayacct.c

…

dma.c

…

exec_domain.c

…

exit.c

ptrace: slightly saner 'get_dumpable()' logic

2026-05-15 14:48:07 +02:00

extable.c

…

fail_function.c

…

fork.c

unshare: fix unshare_fs() handling

2026-04-18 10:30:52 +02:00

freezer.c

…

gen_kheaders.sh

kheaders: Ignore silly-rename files

2025-02-01 18:22:28 +01:00

groups.c

…

hung_task.c

…

iomem.c

…

irq_work.c

…

jump_label.c

…

kallsyms.c

kallsyms: Make kallsyms_on_each_symbol generally available

2024-10-17 15:08:29 +02:00

kcmp.c

kcmp: In get_file_raw_ptr use task_lookup_fd_rcu

2024-06-21 14:52:48 +02:00

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

kcov: don't lose track of remote references during softirqs

2024-07-05 09:12:41 +02:00

kexec_core.c

…

kexec_elf.c

kexec: initialize ELF lowest address to ULONG_MAX

2025-04-10 14:30:58 +02:00

kexec_file.c

kexec: derive purgatory entry from symbol

2026-03-04 07:20:21 -05:00

kexec_internal.h

…

kexec.c

…

kheaders.c

…

kmod.c

…

kprobes.c

x86/ibt,ftrace: Search for __fentry__ location

2024-10-17 15:07:37 +02:00

ksysfs.c

…

kthread.c

kthread: fix task state in kthread worker if being frozen

2024-10-17 15:07:50 +02:00

latencytop.c

…

Makefile

…

module_signature.c

…

module_signing.c

…

module-internal.h

…

module.c

kallsyms: Make module_kallsyms_on_each_symbol generally available

2024-10-17 15:08:29 +02:00

notifier.c

…

nsproxy.c

…

padata.c

padata: Fix pd UAF once and for all

2026-06-01 17:29:18 +02:00

panic.c

panic: Flush kernel log buffer at the end

2024-04-13 12:59:40 +02:00

params.c

module: ensure that kobject_put() is safe for module type kobjects

2025-06-04 14:36:55 +02:00

pid_namespace.c

zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING

2024-07-05 09:12:33 +02:00

pid.c

pidfd: refuse access to tasks that have started exiting harder

2026-06-19 13:21:38 +02:00

profile.c

kernel: Initialize cpumask before parsing

2025-01-09 13:25:04 +01:00

ptrace.c

ptrace: slightly saner 'get_dumpable()' logic

2026-05-15 14:48:07 +02:00

range.c

…

reboot.c

…

regset.c

…

relay.c

…

resource.c

kernel/resource: fix kfree() of bootmem memory again

2025-05-02 07:41:09 +02:00

rseq.c

rseq: Fix segfault on registration when rseq_cs is non-zero

2025-07-17 18:28:01 +02:00

scftorture.c

…

scs.c

scs: fix a wrong parameter in __scs_magic

2026-01-19 13:11:50 +01:00

seccomp.c

…

signal.c

signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()

2026-06-19 13:21:35 +02:00

smp.c

smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()

2024-09-12 11:06:48 +02:00

smpboot.c

…

smpboot.h

…

softirq.c

…

stackleak.c

…

stacktrace.c

…

static_call.c

x86/static-call: provide a way to do very early static-call updates

2024-12-19 18:06:13 +01:00

stop_machine.c

…

sys_ni.c

syscalls: fix compat_sys_io_pgetevents_time64 usage

2024-07-05 09:12:55 +02:00

sys.c

fs: add file and path permissions helpers

2024-06-21 14:52:58 +02:00

sysctl-test.c

…

sysctl.c

sysctl: fix uninitialized variable in proc_do_large_bitmap

2026-04-18 10:31:06 +02:00

task_work.c

task_work: Introduce task_work_cancel() again

2024-08-19 05:40:57 +02:00

taskstats.c

taskstats: set version in TGID exit notifications

2026-06-01 17:29:20 +02:00

test_kprobes.c

…

torture.c

…

tracepoint.c

…

tsacct.c

…

ucount.c

ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()

2026-03-04 07:19:35 -05:00

uid16.c

…

uid16.h

…

umh.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

usermode_driver.c

…

utsname_sysctl.c

…

utsname.c

…

watch_queue.c

watch_queue: fix pipe accounting mismatch

2025-04-10 14:30:55 +02:00

watchdog_hld.c

watchdog/perf: properly initialize the turbo mode timestamp and rearm counter

2024-08-19 05:41:01 +02:00

watchdog.c

…

workqueue_internal.h

…

workqueue.c

…