Jens AxboeandGreg Kroah-Hartman 563ba1701b io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock() ...

[ Upstream commit d58d82bd0e ]

io_uring_cmd_sock() does a normal read of cmd->sqe->cmd_op, where it
really should be using a READ_ONCE() as ->sqe may still be pointing to
the original SQE. Since the prep side already does this READ_ONCE() and
stores it locally, use that value rather than re-read it.

Fixes: 8e9fad0e70 ("io_uring: Add io_uring command support for sockets")
Link: https://lore.kernel.org/r/20250121-uring-sockcmd-fix-v1-1-add742802a29@google.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-02-08 09:52:33 +01:00

..

advise.c

…

advise.h

…

alloc_cache.h

…

cancel.c

io_uring: use fget/fput consistently

2024-01-20 11:51:38 +01:00

cancel.h

io_uring/cancel: support opcode based lookup and cancelation

2023-07-17 10:05:48 -06:00

epoll.c

…

epoll.h

…

fdinfo.c

io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval

2023-11-28 17:19:52 +00:00

fdinfo.h

…

filetable.c

io_uring: drop any code related to SCM_RIGHTS

2024-03-26 18:19:09 -04:00

filetable.h

…

fs.c

io_uring/fs: consider link->flags when getting path for LINKAT

2023-12-03 07:33:07 +01:00

fs.h

…

io_uring.c

io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period

2025-01-17 13:36:24 +01:00

io_uring.h

io_uring/rw: avoid punting to io-wq directly

2024-12-27 13:58:57 +01:00

io-wq.c

io_uring/io-wq: inherit cpuset of cgroup in io worker

2024-10-04 16:29:01 +02:00

io-wq.h

io_uring: break out of iowq iopoll on teardown

2023-09-07 09:02:27 -06:00

kbuf.c

io_uring: check for non-NULL file pointer in io_file_can_poll()

2024-06-21 14:38:23 +02:00

kbuf.h

io_uring/kbuf: hold io_buffer_list reference over mmap

2024-04-10 16:36:03 +02:00

Makefile

…

msg_ring.c

…

msg_ring.h

…

net.c

io_uring/net: harden multishot termination case for recv

2024-10-10 11:58:02 +02:00

net.h

…

nop.c

io_uring: fail NOP if non-zero op flags is passed in

2024-06-12 11:11:18 +02:00

nop.h

…

notif.c

…

notif.h

…

opdef.c

…

opdef.h

…

openclose.c

io_uring: correct check for O_TMPFILE

2023-08-07 12:34:23 -06:00

openclose.h

…

poll.c

io_uring: fix poll_remove stalled req completion

2024-03-26 18:20:09 -04:00

poll.h

…

refs.h

…

rsrc.c

io_uring/rsrc: fix incorrect assignment of iter->nr_segs in io_import_fixed

2024-06-27 13:49:10 +02:00

rsrc.h

io_uring: drop any code related to SCM_RIGHTS

2024-03-26 18:19:09 -04:00

rw.c

io_uring/rw: avoid punting to io-wq directly

2024-12-27 13:58:57 +01:00

rw.h

…

slist.h

…

splice.c

io_uring/splice: use fput() directly

2023-08-10 10:24:25 -06:00

splice.h

…

sqpoll.c

io_uring/sqpoll: fix sqpoll error handling races

2025-01-02 10:32:10 +01:00

sqpoll.h

io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used

2023-08-16 13:40:28 -06:00

statx.c

…

statx.h

…

sync.c

…

sync.h

…

tctx.c

io_uring/tctx: work around xa_store() allocation error issue

2024-12-14 20:00:17 +01:00

tctx.h

…

timeout.c

io_uring/timeout: fix multishot updates

2025-01-17 13:36:19 +01:00

timeout.h

…

uring_cmd.c

io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()

2025-02-08 09:52:33 +01:00

uring_cmd.h

…

xattr.c

…

xattr.h

…