Tejun Heo 0102989af4 sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator ...

commit 428dc9fc08 upstream.

BPF programs may call next() and destroy() on BPF iterators even after new()
returns an error value (e.g. bpf_for_each() macro ignores error returns from
new()). bpf_iter_scx_dsq_new() could leave the iterator in an uninitialized
state after an error return causing bpf_iter_scx_dsq_next() to dereference
garbage data. Make bpf_iter_scx_dsq_new() always clear $kit->dsq so that
next() and destroy() become noops.

Signed-off-by: Tejun Heo <tj@kernel.org>
Fixes: 650ba21b13 ("sched_ext: Implement DSQ iterator")
Cc: stable@vger.kernel.org # v6.12+
Acked-by: Andrea Righi <arighi@nvidia.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-05-22 14:29:44 +02:00

..

bpf

bpf: Fix BPF_INTERNAL namespace import

2025-05-05 11:00:29 +02:00

cgroup

cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks

2025-05-22 14:29:35 +02:00

configs

…

debug

…

dma

dma/contiguous: avoid warning about unused size_bytes

2025-05-02 07:58:59 +02:00

entry

…

events

perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init

2025-05-02 07:59:22 +02:00

futex

futex: Pass in task to futex_queue()

2025-03-22 12:54:14 -07:00

gcov

…

irq

PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag

2025-05-02 07:58:56 +02:00

kcsan

…

livepatch

…

locking

locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()

2025-04-20 10:15:45 +02:00

module

module: sign with sha512 instead of sha1 by default

2025-05-02 07:58:51 +02:00

power

PM: EM: Address RCU-related sparse warnings

2025-05-02 07:58:52 +02:00

printk

Flush console log from kernel_power_off()

2025-04-20 10:15:12 +02:00

rcu

mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq

2025-03-22 12:54:09 -07:00

sched

sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator

2025-05-22 14:29:44 +02:00

time

timekeeping: Add a lockdep override in tick_freeze()

2025-05-02 07:59:25 +02:00

trace

tracing: probes: Fix a possible race in trace_probe_log APIs

2025-05-22 14:29:36 +02:00

.gitignore

…

acct.c

acct: block access to kernel internal filesystems

2025-02-27 04:30:23 -08:00

async.c

…

audit_fsnotify.c

…

audit_tree.c

…

audit_watch.c

…

audit.c

…

audit.h

…

auditfilter.c

…

auditsc.c

…

backtracetest.c

…

bounds.c

…

capability.c

…

cfi.c

…

compat.c

…

configs.c

…

context_tracking.c

…

cpu_pm.c

…

cpu.c

watchdog/hardlockup/perf: Fix perf_event memory leak

2025-04-10 14:39:11 +02:00

crash_core.c

…

crash_reserve.c

…

cred.c

…

delayacct.c

…

dma.c

…

elfcorehdr.c

…

exec_domain.c

…

exit.c

…

exit.h

…

extable.c

…

fail_function.c

…

fork.c

x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()

2025-04-10 14:39:18 +02:00

freezer.c

…

gen_kheaders.sh

kheaders: Ignore silly-rename files

2025-01-23 17:22:55 +01:00

groups.c

…

hung_task.c

…

iomem.c

…

irq_work.c

…

jump_label.c

…

kallsyms_internal.h

…

kallsyms_selftest.c

…

kallsyms_selftest.h

…

kallsyms.c

…

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.kexec

…

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

kcov: mark in_softirq_really() as __always_inline

2025-01-09 13:33:49 +01:00

kexec_core.c

…

kexec_elf.c

kexec: initialize ELF lowest address to ULONG_MAX

2025-04-10 14:39:24 +02:00

kexec_file.c

…

kexec_internal.h

…

kexec.c

…

kheaders.c

…

kprobes.c

…

ksyms_common.c

…

ksysfs.c

…

kthread.c

…

latencytop.c

…

Makefile

…

module_signature.c

…

notifier.c

…

nsproxy.c

…

padata.c

padata: avoid UAF for reorder_work

2025-02-08 09:57:35 +01:00

panic.c

objtool, panic: Disable SMAP in __stack_chk_fail()

2025-05-02 07:59:19 +02:00

params.c

module: ensure that kobject_put() is safe for module type kobjects

2025-05-18 08:24:54 +02:00

pid_namespace.c

…

pid_sysctl.h

…

pid.c

…

profile.c

…

ptrace.c

…

range.c

…

reboot.c

Flush console log from kernel_power_off()

2025-04-20 10:15:12 +02:00

regset.c

…

relay.c

…

resource_kunit.c

…

resource.c

…

rseq.c

…

scftorture.c

…

scs.c

…

seccomp.c

seccomp: passthrough uretprobe systemcall without filtering

2025-02-17 10:05:12 +01:00

signal.c

…

smp.c

…

smpboot.c

…

smpboot.h

…

softirq.c

…

stackleak.c

…

stacktrace.c

…

static_call_inline.c

…

static_call.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

…

sysctl-test.c

…

sysctl.c

…

task_work.c

…

taskstats.c

…

torture.c

…

tracepoint.c

…

tsacct.c

…

ucount.c

…

uid16.c

…

uid16.h

…

umh.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

usermode_driver.c

…

utsname_sysctl.c

…

utsname.c

…

vhost_task.c

vhost: return task creation error instead of NULL

2025-03-22 12:54:21 -07:00

vmcore_info.c

…

watch_queue.c

watch_queue: fix pipe accounting mismatch

2025-04-10 14:39:10 +02:00

watchdog_buddy.c

…

watchdog_perf.c

watchdog/hardlockup/perf: Fix perf_event memory leak

2025-04-10 14:39:11 +02:00

watchdog.c

watchdog/hardlockup/perf: Fix perf_event memory leak

2025-04-10 14:39:11 +02:00

workqueue_internal.h

…

workqueue.c

workqueue: Put the pwq after detaching the rescuer from the pool

2025-02-21 14:01:18 +01:00