Kohei Enju 89b8ca709e efivarfs: fix error propagation in efivar_entry_get() ...

commit 4b22ec1685 upstream.

efivar_entry_get() always returns success even if the underlying
__efivar_entry_get() fails, masking errors.

This may result in uninitialized heap memory being copied to userspace
in the efivarfs_file_read() path.

Fix it by returning the error from __efivar_entry_get().

Fixes: 2d82e6227e ("efi: vars: Move efivar caching layer into efivarfs")
Cc: <stable@vger.kernel.org> # v6.1+
Signed-off-by: Kohei Enju <kohei@enjuk.jp>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-02-06 16:55:45 +01:00

..

9p

9p: fix cache/debug options printing in v9fs_show_options

2025-12-18 13:55:15 +01:00

adfs

…

affs

affs: don't write overlarge OFS data block size fields

2025-04-10 14:39:29 +02:00

afs

afs: Fix potential null pointer dereference in afs_put_server

2025-10-02 13:44:14 +02:00

autofs

…

bcachefs

add a string-to-qstr constructor

2025-07-10 16:05:08 +02:00

befs

…

bfs

bfs: Reconstruct file type when loading from disk

2025-12-12 18:37:20 +01:00

btrfs

btrfs: fix racy bitfield write in btrfs_clear_space_info_full()

2026-01-30 10:28:48 +01:00

cachefiles

cachefiles: Fix the incorrect return value in __cachefiles_write()

2025-07-24 08:56:30 +02:00

ceph

ceph: fix multifs mds auth caps issue

2025-11-13 15:34:35 -05:00

coda

…

configfs

configfs: Do not override creating attribute file failure in populate_attrs()

2025-06-27 11:11:12 +01:00

cramfs

cramfs: Verify inode mode when loading from disk

2025-10-19 16:34:06 +02:00

crypto

fscrypt: Don't use problematic non-inline crypto engines

2025-08-20 18:30:15 +02:00

debugfs

debugfs: fix mount options not being applied

2025-08-28 16:31:08 +02:00

devpts

…

dlm

dlm: check for defined force value in dlm_lockspace_release

2025-10-29 14:08:52 +01:00

ecryptfs

…

efivarfs

efivarfs: fix error propagation in efivar_entry_get()

2026-02-06 16:55:45 +01:00

efs

…

erofs

erofs: fix file-backed mounts no longer working on EROFS partitions

2026-01-17 16:31:25 +01:00

exfat

exfat: fix refcount leak in exfat_find

2026-01-30 10:28:48 +01:00

exportfs

…

ext2

ext2: Handle fiemap on empty files to prevent EINVAL

2025-08-20 18:30:21 +02:00

ext4

ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref

2026-01-23 11:18:45 +01:00

f2fs

f2fs: fix to propagate error from f2fs_enable_checkpoint()

2026-01-08 10:14:59 +01:00

fat

…

freevxfs

…

fuse

fuse: fix readahead reclaim deadlock

2026-01-08 10:14:31 +01:00

gfs2

Revert "gfs2: Fix use of bio_chain"

2026-01-23 11:18:35 +01:00

hfs

hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()

2025-10-29 14:08:52 +01:00

hfsplus

hfsplus: fix volume corruption issue for generic/073

2026-01-08 10:13:57 +01:00

hostfs

hostfs: Fix only passing host root in boot stage with new mount

2025-11-24 10:35:56 +01:00

hpfs

fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink

2025-11-13 15:34:33 -05:00

hugetlbfs

mm/hugetlb: fix folio is still mapped when deleted

2025-10-02 13:44:14 +02:00

iomap

iomap: allocate s_dio_done_wq for async reads as well

2026-01-08 10:15:06 +01:00

isofs

isofs: check the return value of sb_min_blocksize() in isofs_fill_super

2025-12-01 11:43:20 +01:00

jbd2

jbd2: fix the inconsistency between checksum and data in memory for journal sb

2026-01-08 10:14:56 +01:00

jffs2

jffs2: check jffs2_prealloc_raw_node_refs() result in few other places

2025-06-27 11:11:37 +01:00

jfs

jfs: fix uninitialized waitqueue in transaction manager

2025-11-13 15:34:27 -05:00

kernfs

kernfs: Fix UAF in polling when open file is released

2025-09-19 16:35:47 +02:00

lockd

lockd: fix vfs_test_lock() calls

2026-01-08 10:14:49 +01:00

minix

minixfs: Verify inode mode when loading from disk

2025-10-19 16:34:05 +02:00

netfs

netfs: Prevent duplicate unlocking

2025-10-12 12:57:17 +02:00

nfs

pnfs/blocklayout: Fix memory leak in bl_parse_scsi()

2026-01-23 11:18:36 +01:00

nfs_common

NFSD: Remove NFSERR_EAGAIN

2026-01-17 16:31:15 +01:00

nfsd

NFSD: Remove NFSERR_EAGAIN

2026-01-17 16:31:15 +01:00

nilfs2

nilfs2: avoid having an active sc_timer before freeing sci

2025-11-24 10:36:00 +01:00

nls

fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()

2025-12-18 13:55:18 +01:00

notify

fsnotify: do not generate ACCESS/MODIFY events on child for special files

2026-01-08 10:14:24 +01:00

ntfs3

fs/ntfs3: Initialize allocated memory before use

2026-01-30 10:28:48 +01:00

ocfs2

ocfs2: fix kernel BUG in ocfs2_find_victim_chain

2026-01-08 10:14:21 +01:00

omfs

…

openpromfs

…

orangefs

orangefs: fix xattr related buffer overflow...

2025-11-13 15:34:31 -05:00

overlayfs

ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()

2025-08-28 16:31:10 +02:00

proc

proc: proc_maps_open allow proc_mem_open to return NULL

2025-11-24 10:36:08 +01:00

pstore

pstore: Change kmsg_bytes storage size to u32

2025-05-29 11:02:58 +02:00

qnx4

…

qnx6

fs/qnx6: Fix building with GCC 15

2025-01-23 17:22:55 +01:00

quota

fs: quota: create dedicated workqueue for quota_release_work

2025-10-19 16:33:49 +02:00

ramfs

…

reiserfs

…

romfs

…

smb

smb/client: fix NT_STATUS_NO_DATA_DETECTED value

2026-01-17 16:31:19 +01:00

squashfs

Squashfs: reject negative file sizes in squashfs_read_inode()

2025-10-19 16:34:00 +02:00

sysfs

…

sysv

…

tests

…

tracefs

tracefs: fix a leak in eventfs_create_events_dir()

2025-12-18 13:55:00 +01:00

ubifs

ubifs: skip dumping tnc tree when zroot is null

2025-02-08 09:58:01 +01:00

udf

fs: udf: fix OOB read in lengthAllocDescs handling

2025-10-15 12:00:21 +02:00

ufs

…

unicode

…

vboxsf

vboxsf: fix building with GCC 15

2025-03-22 12:54:15 -07:00

verity

…

xfs

xfs: set max_agbno to allow sparse alloc of last full inode chunk

2026-01-23 11:18:50 +01:00

zonefs

…

aio.c

…

anon_inodes.c

fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass

2025-07-10 16:05:09 +02:00

attr.c

…

backing-file.c

…

bad_inode.c

…

binfmt_elf_fdpic.c

…

binfmt_elf.c

binfmt_elf: Move brk for static PIE even if ASLR disabled

2025-05-22 14:29:35 +02:00

binfmt_flat.c

binfmt_flat: Fix integer overflow bug on 32 bit systems

2025-02-17 10:05:04 +01:00

binfmt_misc.c

…

binfmt_script.c

…

bpf_fs_kfuncs.c

…

buffer.c

fs/buffer: fix use-after-free when call bh_read() helper

2025-08-28 16:31:08 +02:00

char_dev.c

…

compat_binfmt_elf.c

…

coredump.c

coredump: hand a pidfd to the usermode coredump helper

2025-06-04 14:43:52 +02:00

d_path.c

…

dax.c

dax: skip read lock assertion for read-only filesystems

2025-10-23 16:20:27 +02:00

dcache.c

nfs/vfs: discard d_exact_alias()

2025-12-18 13:55:17 +01:00

direct-io.c

…

drop_caches.c

…

eventfd.c

…

eventpoll.c

eventpoll: Replace rwlock with spinlock

2025-10-19 16:33:49 +02:00

exec.c

exec: Fix incorrect type for ret

2025-10-29 14:08:51 +01:00

fcntl.c

…

fhandle.c

fhandle: use more consistent rules for decoding file handle from userns

2025-09-19 16:35:41 +02:00

file_table.c

add a string-to-qstr constructor

2025-07-10 16:05:08 +02:00

file.c

fs: always return zero on success from replace_fd()

2025-10-19 16:33:33 +02:00

filesystems.c

fs/filesystems: Fix potential unsigned integer underflow in fs_name()

2025-06-19 15:32:32 +02:00

fs_context.c

…

fs_parser.c

…

fs_pin.c

…

fs_struct.c

…

fs_types.c

…

fs-writeback.c

writeback: Avoid excessively long inode switching times

2025-10-19 16:34:06 +02:00

fsopen.c

fscontext: do not consume log entries when returning -EMSGSIZE

2025-10-19 16:33:33 +02:00

init.c

…

inode.c

…

internal.h

…

ioctl.c

…

Kconfig

nfs: add missing selections of CONFIG_CRC32

2025-04-25 10:47:50 +02:00

Kconfig.binfmt

…

kernel_read_file.c

…

libfs.c

shmem: fix recovery on rename failures

2026-01-08 10:13:54 +01:00

locks.c

lockd: fix vfs_test_lock() calls

2026-01-08 10:14:49 +01:00

Makefile

…

mbcache.c

…

mnt_idmapping.c

…

mount.h

…

mpage.c

…

namei.c

openat2: don't trigger automounts with RESOLVE_NO_XDEV

2025-10-19 16:33:51 +02:00

namespace.c

fs/namespace: fix reference leak in grab_requested_mnt_ns

2025-12-07 06:24:56 +09:00

nsfs.c

…

open.c

allow finish_no_open(file, ERR_PTR(-E...))

2025-11-13 15:34:26 -05:00

pidfs.c

pidfs: raise SB_I_NODEV and SB_I_NOEXEC

2025-08-20 18:30:21 +02:00

pipe.c

…

pnode.c

…

pnode.h

…

posix_acl.c

…

proc_namespace.c

…

read_write.c

copy_file_range: limit size if in compat mode

2025-10-19 16:34:05 +02:00

readdir.c

…

remap_range.c

…

select.c

select: Fix unbalanced user_access_end()

2025-02-08 09:56:53 +01:00

seq_file.c

…

signalfd.c

…

splice.c

netfs: Fix unbuffered write error handling

2025-08-28 16:31:04 +02:00

stack.c

…

stat.c

…

statfs.c

…

super.c

…

sync.c

…

sysctls.c

…

timerfd.c

…

userfaultfd.c

mm/userfaultfd: fix uninitialized output field for -EAGAIN race

2025-05-18 08:24:52 +02:00

utimes.c

…

xattr.c

fs/xattr.c: fix simple_xattr_list()

2025-06-27 11:11:36 +01:00