Christoph Hellwig 3fd11fe4f2 block: initialize integrity buffer to zero before writing it to media ...

commit 899ee2c382 upstream.

Metadata added by bio_integrity_prep is using plain kmalloc, which leads
to random kernel memory being written media.  For PI metadata this is
limited to the app tag that isn't used by kernel generated metadata,
but for non-PI metadata the entire buffer leaks kernel memory.

Fix this by adding the __GFP_ZERO flag to allocations for writes.

Fixes: 7ba1ba12ee ("block: Block layer data integrity support")
Signed-off-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com>
Reviewed-by: Kanchan Joshi <joshi.k@samsung.com>
Reviewed-by: Chaitanya Kulkarni <kch@nvidia.com>
Link: https://lore.kernel.org/r/20240613084839.1044015-2-hch@lst.de
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Shivani Agarwal <shivani.agarwal@broadcom.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-09-12 11:06:41 +02:00

..

partitions

block/partition: fix signedness issue for Amiga partitions

2023-07-27 08:44:18 +02:00

badblocks.c

…

bfq-cgroup.c

block, bfq: fix uaf for bfqq in bic_set_bfqq()

2023-03-17 08:45:14 +01:00

bfq-iosched.c

block, bfq: fix uaf for bfqq in bic_set_bfqq()

2023-03-17 08:45:14 +01:00

bfq-iosched.h

bfq: Get rid of __bio_blkcg() usage

2022-06-09 10:21:31 +02:00

bfq-wf2q.c

…

bio-integrity.c

block: initialize integrity buffer to zero before writing it to media

2024-09-12 11:06:41 +02:00

bio.c

block: prevent an integer overflow in bvec_try_merge_hw_page

2024-02-23 08:42:09 +01:00

blk-cgroup-rwstat.c

…

blk-cgroup-rwstat.h

…

blk-cgroup.c

blk-cgroup: fix missing pd_online_fn() while activating policy

2023-02-06 07:56:15 +01:00

blk-core.c

block: fix use-after-free of q->q_usage_counter

2023-10-10 21:53:36 +02:00

blk-crypto-fallback.c

…

blk-crypto-internal.h

blk-mq: release crypto keyslot before reporting I/O complete

2023-05-17 11:47:32 +02:00

blk-crypto.c

blk-crypto: make blk_crypto_evict_key() more robust

2023-05-17 11:47:32 +02:00

blk-exec.c

…

blk-flush.c

block: Fix fsync always failed if once failed

2022-01-27 10:54:30 +01:00

blk-integrity.c

block: remove the blk_flush_integrity call in blk_integrity_unregister

2024-09-12 11:06:41 +02:00

blk-ioc.c

…

blk-iocost.c

blk-iocost: avoid out of bounds shift

2024-05-17 11:48:04 +02:00

blk-iolatency.c

blk-iolatency: Fix inflight count imbalances and IO hangs on offline

2022-06-09 10:21:29 +02:00

blk-lib.c

…

blk-map.c

block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern

2022-05-12 12:25:45 +02:00

blk-merge.c

blk-mq: release crypto keyslot before reporting I/O complete

2023-05-17 11:47:32 +02:00

blk-mq-cpumap.c

…

blk-mq-debugfs-zoned.c

…

blk-mq-debugfs.c

blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created

2022-08-21 15:15:35 +02:00

blk-mq-debugfs.h

…

blk-mq-pci.c

…

blk-mq-rdma.c

…

blk-mq-sched.c

blk-mq: correct stale comment of .get_budget

2023-03-11 16:39:15 +01:00

blk-mq-sched.h

…

blk-mq-sysfs.c

blk-mq: fix possible memleak when register 'hctx' failed

2023-01-14 10:16:19 +01:00

blk-mq-tag.c

…

blk-mq-tag.h

…

blk-mq-virtio.c

…

blk-mq.c

blk-mq: fix IO hang from sbitmap wakeup race

2024-02-23 08:42:14 +01:00

blk-mq.h

…

blk-pm.c

scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume()

2022-01-27 10:54:08 +01:00

blk-pm.h

…

blk-rq-qos.c

…

blk-rq-qos.h

…

blk-settings.c

block: Clear zone limits for a non-zoned stacked queue

2024-04-13 12:58:07 +02:00

blk-stat.c

block: prevent division by zero in blk_rq_stat_sum()

2024-04-13 12:59:49 +02:00

blk-stat.h

…

blk-sysfs.c

block: introduce zone_write_granularity limit

2024-04-13 12:58:07 +02:00

blk-throttle.c

blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!"

2023-12-20 15:44:31 +01:00

blk-timeout.c

…

blk-wbt.c

blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()

2022-10-30 09:41:19 +01:00

blk-wbt.h

…

blk-zoned.c

…

blk.h

…

bounce.c

…

bsg-lib.c

…

bsg.c

…

cmdline-parser.c

…

elevator.c

block/wbt: fix negative inflight counter when remove scsi device

2022-02-23 12:01:04 +01:00

genhd.c

…

ioctl.c

block/ioctl: prefer different overflow check

2024-07-05 09:12:33 +02:00

ioprio.c

…

Kconfig

…

Kconfig.iosched

…

keyslot-manager.c

blk-crypto: make blk_crypto_evict_key() more robust

2023-05-17 11:47:32 +02:00

kyber-iosched.c

…

Makefile

…

mq-deadline.c

…

opal_proto.h

block: sed-opal: handle empty atoms when parsing response

2024-03-26 18:21:46 -04:00

scsi_ioctl.c

…

sed-opal.c

block: sed-opal: handle empty atoms when parsing response

2024-03-26 18:21:46 -04:00

t10-pi.c

…