Yun Zhou 21989cb503 md: fix rcu protection in md_wakeup_thread ...

[ Upstream commit 0dc7620554 ]

We attempted to use RCU to protect the pointer 'thread', but directly
passed the value when calling md_wakeup_thread(). This means that the
RCU pointer has been acquired before rcu_read_lock(), which renders
rcu_read_lock() ineffective and could lead to a use-after-free.

Link: https://lore.kernel.org/linux-raid/20251015083227.1079009-1-yun.zhou@windriver.com
Fixes: 4469315439 ("md: protect md_thread with rcu")
Signed-off-by: Yun Zhou <yun.zhou@windriver.com>
Reviewed-by: Li Nan <linan122@huawei.com>
Reviewed-by: Yu Kuai <yukuai@fnnas.com>
Signed-off-by: Yu Kuai <yukuai@fnnas.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-12-18 13:54:55 +01:00

..

bcache

Revert "bcache: remove heap-related macros and switch to generic min_heap"

2025-08-15 12:14:10 +02:00

dm-vdo

dm vdo: return error on corrupted metadata in start_restoring_volume functions

2025-10-15 12:00:15 +02:00

persistent-data

…

dm-audit.c

…

dm-audit.h

…

dm-bio-prison-v1.c

…

dm-bio-prison-v1.h

…

dm-bio-prison-v2.c

…

dm-bio-prison-v2.h

…

dm-bio-record.h

…

dm-bufio.c

dm-bufio: fix sched in atomic context

2025-07-24 08:56:22 +02:00

dm-builtin.c

…

dm-cache-background-tracker.c

…

dm-cache-background-tracker.h

…

dm-cache-block-types.h

…

dm-cache-metadata.c

…

dm-cache-metadata.h

…

dm-cache-policy-internal.h

…

dm-cache-policy-smq.c

…

dm-cache-policy.c

…

dm-cache-policy.h

…

dm-cache-target.c

dm cache: prevent BUG_ON by blocking retries on failed device resumes

2025-05-29 11:02:28 +02:00

dm-clone-metadata.c

…

dm-clone-metadata.h

…

dm-clone-target.c

…

dm-core.h

dm: fix queue start/stop imbalance under suspend/load/resume races

2025-10-15 12:00:22 +02:00

dm-crypt.c

dm: dm-crypt: Do not partially accept write BIOs with zoned targets

2025-08-28 16:30:53 +02:00

dm-delay.c

…

dm-dust.c

…

dm-ebs-target.c

…

dm-era-target.c

…

dm-exception-store.c

…

dm-exception-store.h

…

dm-flakey.c

dm-flakey: make corrupting read bios work

2025-06-19 15:32:05 +02:00

dm-ima.c

…

dm-ima.h

…

dm-init.c

…

dm-integrity.c

dm-integrity: limit MAX_TAG_SIZE to 255

2025-10-12 12:57:16 +02:00

dm-io-rewind.c

…

dm-io-tracker.h

…

dm-io.c

…

dm-ioctl.c

…

dm-kcopyd.c

…

dm-linear.c

…

dm-log-userspace-base.c

…

dm-log-userspace-transfer.c

…

dm-log-userspace-transfer.h

…

dm-log-writes.c

…

dm-log.c

…

dm-mpath.c

…

dm-mpath.h

…

dm-path-selector.c

…

dm-path-selector.h

…

dm-ps-historical-service-time.c

dm-mpath: don't print the "loaded" message if registering fails

2025-08-20 18:30:46 +02:00

dm-ps-io-affinity.c

…

dm-ps-queue-length.c

dm-mpath: don't print the "loaded" message if registering fails

2025-08-20 18:30:46 +02:00

dm-ps-round-robin.c

dm-mpath: don't print the "loaded" message if registering fails

2025-08-20 18:30:46 +02:00

dm-ps-service-time.c

dm-mpath: don't print the "loaded" message if registering fails

2025-08-20 18:30:46 +02:00

dm-raid1.c

dm-mirror: fix a tiny race condition

2025-06-27 11:11:23 +01:00

dm-raid.c

dm-raid: don't set io_min and io_opt for raid1

2025-09-25 11:13:45 +02:00

dm-region-hash.c

…

dm-rq.c

…

dm-rq.h

…

dm-snap-persistent.c

…

dm-snap-transient.c

…

dm-snap.c

…

dm-stats.c

…

dm-stats.h

…

dm-stripe.c

dm-stripe: fix a possible integer overflow

2025-09-25 11:13:45 +02:00

dm-switch.c

…

dm-sysfs.c

…

dm-table.c

dm-table: fix checking for rq stackable devices

2025-08-20 18:30:46 +02:00

dm-target.c

dm error: mark as DM_TARGET_PASSES_INTEGRITY

2025-11-13 15:34:14 -05:00

dm-thin-metadata.c

…

dm-thin-metadata.h

…

dm-thin.c

…

dm-uevent.c

…

dm-uevent.h

…

dm-unstripe.c

…

dm-verity-fec.c

dm-verity: fix unreliable memory allocation

2025-12-07 06:24:59 +09:00

dm-verity-fec.h

…

dm-verity-loadpin.c

…

dm-verity-target.c

dm-verity: fix a memory leak if some arguments are specified multiple times

2025-06-27 11:11:23 +01:00

dm-verity-verify-sig.c

dm-verity: fix a memory leak if some arguments are specified multiple times

2025-06-27 11:11:23 +01:00

dm-verity-verify-sig.h

…

dm-verity.h

…

dm-writecache.c

…

dm-zero.c

…

dm-zone.c

dm: fix dm_blk_report_zones

2025-06-19 15:32:05 +02:00

dm-zoned-metadata.c

…

dm-zoned-reclaim.c

…

dm-zoned-target.c

md: dm-zoned-target: Initialize return variable r to avoid uninitialized use

2025-08-20 18:30:46 +02:00

dm-zoned.h

…

dm.c

dm: fix NULL pointer dereference in __dm_suspend()

2025-10-15 12:00:22 +02:00

dm.h

…

Kconfig

…

Makefile

…

md-autodetect.c

…

md-bitmap.c

md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb

2025-09-09 18:58:21 +02:00

md-bitmap.h

…

md-cluster.c

…

md-cluster.h

…

md-linear.c

md: fix mssing blktrace bio split events

2025-10-23 16:20:42 +02:00

md.c

md: fix rcu protection in md_wakeup_thread

2025-12-18 13:54:55 +01:00

md.h

md: fix rcu protection in md_wakeup_thread

2025-12-18 13:54:55 +01:00

raid0.c

md: fix mssing blktrace bio split events

2025-10-23 16:20:42 +02:00

raid0.h

…

raid1-10.c

md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT

2025-09-09 18:58:20 +02:00

raid1.c

md: fix mssing blktrace bio split events

2025-10-23 16:20:42 +02:00

raid1.h

…

raid5-cache.c

…

raid5-log.h

…

raid5-ppl.c

…

raid5.c

md: fix mssing blktrace bio split events

2025-10-23 16:20:42 +02:00

raid5.h

…

raid10.c

md: fix mssing blktrace bio split events

2025-10-23 16:20:42 +02:00

raid10.h

…