Koichiro Den fcb32111f0 iommufd: Fix missing update of domains_itree after splitting iopt_area ...

commit e7250ab7ca upstream.

In iopt_area_split(), if the original iopt_area has filled a domain and is
linked to domains_itree, pages_nodes have to be properly
reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.

Fixes: 51fe6141f0 ("iommufd: Data structure to provide IOVA to PFN mapping")
Link: https://lore.kernel.org/r/20231027162941.2864615-2-den@valinux.co.jp
Cc: stable@vger.kernel.org
Signed-off-by: Koichiro Den <den@valinux.co.jp>
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-11-28 17:19:57 +00:00

..

amd

Merge tag 'iommu-updates-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu

2023-09-01 16:54:25 -07:00

arm

iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range

2023-09-22 11:15:42 +01:00

intel

iommu/vt-d: Avoid memory allocation in iommu_suspend()

2023-09-25 16:10:36 +02:00

iommufd

iommufd: Fix missing update of domains_itree after splitting iopt_area

2023-11-28 17:19:57 +00:00

apple-dart.c

iommu/apple-dart: Handle DMA_FQ domains in attach_dev()

2023-09-25 11:37:19 +02:00

dma-iommu.c

iommu: Optimise PCI SAC address trick

2023-07-14 16:14:17 +02:00

dma-iommu.h

iommu: Optimise PCI SAC address trick

2023-07-14 16:14:17 +02:00

exynos-iommu.c

Merge branches 'iommu/fixes', 'arm/allwinner', 'arm/exynos', 'arm/mediatek', 'arm/omap', 'arm/renesas', 'arm/rockchip', 'arm/smmu', 'ppc/pamu', 'unisoc', 'x86/vt-d', 'x86/amd', 'core' and 'platform-remove_new' into next

2023-04-14 13:45:50 +02:00

fsl_pamu_domain.c

iommu/fsl: Use driver_managed_dma to allow VFIO to work

2023-06-01 11:47:48 +02:00

fsl_pamu_domain.h

…

fsl_pamu.c

…

fsl_pamu.h

…

hyperv-iommu.c

x86/vector: Rename send_cleanup_vector() to vector_schedule_cleanup()

2023-08-06 14:15:09 +02:00

io-pgfault.c

…

io-pgtable-arm-v7s.c

…

io-pgtable-arm.c

…

io-pgtable-arm.h

…

io-pgtable-dart.c

…

io-pgtable.c

…

iommu-debugfs.c

…

iommu-priv.h

iommu: Move dev_iommu_ops() to private header

2023-08-18 12:52:15 -03:00

iommu-sva.c

iommu: Move global PASID allocation from SVA to core

2023-08-09 17:44:36 +02:00

iommu-sva.h

…

iommu-sysfs.c

iommu: Do not export iommu_device_link/unlink()

2023-07-14 16:14:15 +02:00

iommu-traces.c

…

iommu.c

iommu: Avoid unnecessary cache invalidations

2023-10-27 08:57:09 +02:00

iova.c

iommu/iova: Optimize iova_magazine_alloc()

2023-05-22 17:09:51 +02:00

ipmmu-vmsa.c

Merge branches 'apple/dart', 'arm/mediatek', 'arm/renesas', 'arm/rockchip', 'arm/smmu', 'unisoc', 'x86/vt-d', 'x86/amd' and 'core' into next

2023-08-21 14:18:43 +02:00

irq_remapping.c

…

irq_remapping.h

…

Kconfig

Merge tag 'mm-stable-2023-06-24-19-15' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2023-06-28 10:28:11 -07:00

Makefile

…

msm_iommu_hw-8xxx.h

…

msm_iommu.c

…

msm_iommu.h

…

mtk_iommu_v1.c

…

mtk_iommu.c

iommu/mediatek: Fix share pgtable for iova over 4GB

2023-09-25 11:34:02 +02:00

of_iommu.c

iommu: Have __iommu_probe_device() check for already probed devices

2023-07-14 16:14:12 +02:00

omap-iommu-debug.c

…

omap-iommu.c

Merge branches 'iommu/fixes', 'arm/allwinner', 'arm/exynos', 'arm/mediatek', 'arm/omap', 'arm/renesas', 'arm/rockchip', 'arm/smmu', 'ppc/pamu', 'unisoc', 'x86/vt-d', 'x86/amd', 'core' and 'platform-remove_new' into next

2023-04-14 13:45:50 +02:00

omap-iommu.h

…

omap-iopgtable.h

…

rockchip-iommu.c

iommu: rockchip: Allocate tables from all available memory for IOMMU v2

2023-07-14 16:18:04 +02:00

s390-iommu.c

…

sprd-iommu.c

Merge branches 'apple/dart', 'arm/mediatek', 'arm/renesas', 'arm/rockchip', 'arm/smmu', 'unisoc', 'x86/vt-d', 'x86/amd' and 'core' into next

2023-08-21 14:18:43 +02:00

sun50i-iommu.c

iommu/sun50i: remove MODULE_LICENSE in non-modules

2023-04-13 13:13:52 -07:00

tegra-gart.c

…

tegra-smmu.c

iommu: Explicitly include correct DT includes

2023-08-21 14:17:59 +02:00

virtio-iommu.c

iommu: Explicitly include correct DT includes

2023-08-21 14:17:59 +02:00