Jann HornandGreg Kroah-Hartman bb43679356 proc: protect ptrace_may_access() with exec_update_lock (part 1) ...

[ Upstream commit 6650527444 ]

Fix the easy cases where procfs currently calls ptrace_may_access() without
exec_update_lock protection, where the fix is to simply add the extra lock
or use mm_access():

 - do_task_stat(): grab exec_update_lock
 - proc_pid_wchan(): grab exec_update_lock
 - proc_map_files_lookup(): use mm_access() instead of get_task_mm()
 - proc_map_files_readdir(): use mm_access() instead of get_task_mm()
 - proc_ns_get_link(): grab exec_update_lock
 - proc_ns_readlink(): grab exec_update_lock

Fixes: f83ce3e6b0 ("proc: avoid information leaks to non-privileged processes")
Cc: stable@vger.kernel.org
Signed-off-by: Jann Horn <jannh@google.com>
Link: https://patch.msgid.link/20260518-procfs-lockfix-part1-v1-1-5c3d20e0ac33@google.com
Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-07-24 15:55:16 +02:00

..

array.c

proc: protect ptrace_may_access() with exec_update_lock (part 1)

2026-07-24 15:55:16 +02:00

base.c

proc: protect ptrace_may_access() with exec_update_lock (part 1)

2026-07-24 15:55:16 +02:00

bootconfig.c

…

cmdline.c

…

consoles.c

…

cpuinfo.c

…

devices.c

…

fd.c

proc: protect ptrace_may_access() with exec_update_lock (FD links)

2026-07-24 15:55:15 +02:00

fd.h

…

generic.c

proc: only bump parent nlink when registering directories

2026-07-24 15:55:02 +02:00

inode.c

proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al

2025-08-15 12:05:03 +02:00

internal.h

proc: protect ptrace_may_access() with exec_update_lock (FD links)

2026-07-24 15:55:15 +02:00

interrupts.c

…

Kconfig

…

kcore.c

…

kmsg.c

…

loadavg.c

…

Makefile

…

meminfo.c

…

namespaces.c

proc: protect ptrace_may_access() with exec_update_lock (part 1)

2026-07-24 15:55:16 +02:00

nommu.c

…

page.c

…

proc_net.c

proc: rename proc_setattr to proc_nochmod_setattr

2026-07-24 15:55:15 +02:00

proc_sysctl.c

fix proc_sys_compare() handling of in-lookup dentries

2025-07-17 18:32:05 +02:00

proc_tty.c

…

root.c

…

self.c

…

softirqs.c

…

stat.c

…

task_mmu.c

…

task_nommu.c

…

thread_self.c

…

uptime.c

…

util.c

…

version.c

…

vmcore.c

…