Roberto Sassu 051d642133 memfd: check for non-NULL file_seals in memfd_create() syscall ...

[ Upstream commit 935d44acf6 ]

Ensure that file_seals is non-NULL before using it in the memfd_create()
syscall.  One situation in which memfd_file_seals_ptr() could return a
NULL pointer when CONFIG_SHMEM=n, oopsing the kernel.

Link: https://lkml.kernel.org/r/20230607132427.2867435-1-roberto.sassu@huaweicloud.com
Fixes: 47b9012ecd ("shmem: add sealing support to hugetlb-backed memfd")
Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com>
Cc: Marc-Andr Lureau <marcandre.lureau@redhat.com>
Cc: Mike Kravetz <mike.kravetz@oracle.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-06-28 10:28:09 +02:00

..

kasan

panic: Consolidate open-coded panic_on_warn checks

2023-02-01 08:23:20 +01:00

backing-dev.c

writeback, cgroup: remove extra percpu_ref_exit()

2023-05-30 12:57:56 +01:00

balloon_compaction.c

…

cleancache.c

…

cma_debug.c

…

cma.c

…

cma.h

…

compaction.c

mm, compaction: fix fast_isolate_around() to stay within boundaries

2023-01-14 10:16:27 +01:00

debug_page_ref.c

…

debug_vm_pgtable.c

mm/debug_vm_pgtable: remove pte entry from the page table

2022-02-08 18:30:35 +01:00

debug.c

…

dmapool.c

…

early_ioremap.c

…

fadvise.c

…

failslab.c

…

filemap.c

mm: fs: initialize fsdata passed to write_begin/write_end interface

2022-11-25 17:45:56 +01:00

frame_vector.c

v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails

2022-12-08 11:24:00 +01:00

frontswap.c

…

gup_benchmark.c

…

gup.c

mm/migration: return errno when isolate_huge_page failed

2023-02-15 17:22:21 +01:00

highmem.c

…

hmm.c

mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault

2022-01-27 10:54:36 +01:00

huge_memory.c

mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage

2023-03-22 13:30:04 +01:00

hugetlb_cgroup.c

hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings

2021-03-30 14:31:54 +02:00

hugetlb.c

mm/migration: return errno when isolate_huge_page failed

2023-02-15 17:22:21 +01:00

hwpoison-inject.c

…

init-mm.c

mm/gup: prevent gup_fast from racing with COW during fork

2020-12-30 11:53:54 +01:00

internal.h

mm/thp: fix vma_address() if virtual address below file offset

2021-06-30 08:47:27 -04:00

interval_tree.c

…

ioremap.c

…

Kconfig

mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING

2020-12-06 10:19:07 -08:00

Kconfig.debug

…

khugepaged.c

mm/khugepaged: check again on anon uffd-wp during isolation

2023-04-26 11:27:38 +02:00

kmemleak.c

Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"

2022-09-15 11:32:02 +02:00

ksm.c

ksm: fix potential missing rmap_item for stable_node

2021-05-19 10:13:07 +02:00

list_lru.c

mm: list_lru: set shrinker map bit when child nr_items is not zero

2020-12-06 10:19:07 -08:00

maccess.c

maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault()

2022-11-25 17:45:53 +01:00

madvise.c

mm: fix madivse_pageout mishandling on non-LRU page

2022-10-05 10:38:40 +02:00

Makefile

…

mapping_dirty_helpers.c

…

memblock.c

Revert "mm: Always release pages to the buddy allocator in memblock_free_late()."

2023-02-22 12:55:56 +01:00

memcontrol.c

mm: memcontrol: deprecate charge moving

2023-03-11 16:40:04 +01:00

memfd.c

memfd: check for non-NULL file_seals in memfd_create() syscall

2023-06-28 10:28:09 +02:00

memory_hotplug.c

mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block

2023-06-21 15:45:40 +02:00

memory-failure.c

mm/migration: return errno when isolate_huge_page failed

2023-02-15 17:22:21 +01:00

memory.c

mm/memory: add non-anonymous page check in the copy_present_page()

2022-11-03 23:57:50 +09:00

mempolicy.c

migrate: hugetlb: check for hugetlb shared PMD in node migration

2023-02-15 17:22:21 +01:00

mempool.c

…

memremap.c

mm/memremap.c: map FS_DAX device memory as decrypted

2022-11-16 09:57:17 +01:00

memtest.c

…

migrate.c

mm/migration: return errno when isolate_huge_page failed

2023-02-15 17:22:21 +01:00

mincore.c

…

mlock.c

…

mm_init.c

…

mmap.c

mm/mmap: undo ->mmap() when arch_validate_flags() fails

2022-10-26 13:25:11 +02:00

mmu_gather.c

mm/khugepaged: fix GUP-fast interaction by sending IPI

2022-12-14 11:31:55 +01:00

mmu_notifier.c

mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove()

2022-04-27 13:53:54 +02:00

mmzone.c

arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL

2022-05-15 20:00:09 +02:00

mprotect.c

mm: don't try to NUMA-migrate COW pages that have other uses

2022-02-23 12:00:57 +01:00

mremap.c

mm/mremap: hold the rmap lock in write mode when moving page table entries.

2022-08-21 15:15:21 +02:00

msync.c

…

nommu.c

…

oom_kill.c

oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup

2022-04-27 13:53:54 +02:00

page_alloc.c

mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock

2023-05-17 11:48:19 +02:00

page_counter.c

…

page_ext.c

…

page_idle.c

…

page_io.c

mm: fix unexpected zeroed page mapping with zram swap

2022-04-20 09:23:25 +02:00

page_isolation.c

…

page_owner.c

…

page_poison.c

…

page_reporting.c

…

page_reporting.h

…

page_vma_mapped.c

mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk()

2021-06-30 08:47:29 -04:00

page-writeback.c

mm: make wait_on_page_writeback() wait for multiple pending writebacks

2021-01-12 20:18:22 +01:00

pagewalk.c

mm: pagewalk: Fix race between unmap and page walker

2022-09-08 11:11:38 +02:00

percpu-internal.h

percpu: make pcpu_nr_empty_pop_pages per chunk type

2021-04-14 08:42:03 +02:00

percpu-km.c

…

percpu-stats.c

percpu: make pcpu_nr_empty_pop_pages per chunk type

2021-04-14 08:42:03 +02:00

percpu-vm.c

…

percpu.c

percpu: make pcpu_nr_empty_pop_pages per chunk type

2021-04-14 08:42:03 +02:00

pgalloc-track.h

…

pgtable-generic.c

mm/thp: fix __split_huge_pmd_locked() on shmem migration entry

2021-06-30 08:47:26 -04:00

process_vm_access.c

mm/process_vm_access.c: include compat.h

2021-01-19 18:27:21 +01:00

ptdump.c

mm: pagewalk: Fix race between unmap and page walker

2022-09-08 11:11:38 +02:00

readahead.c

…

rmap.c

mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse

2022-09-05 10:28:56 +02:00

rodata_test.c

…

shmem.c

shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode

2022-01-27 10:53:44 +01:00

shuffle.c

…

shuffle.h

…

slab_common.c

mm/slub: fix redzoning for small allocations

2021-06-23 14:42:54 +02:00

slab.c

mm/sl?b.c: remove ctor argument from kmem_cache_flags

2021-05-14 09:50:45 +02:00

slab.h

mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag

2021-11-26 10:39:19 +01:00

slob.c

…

slub.c

mm/slub: fix to return errno if kmalloc() fails

2022-09-28 11:10:28 +02:00

sparse-vmemmap.c

…

sparse.c

mm/sparse: add the missing sparse_buffer_fini() in error branch

2021-05-14 09:50:45 +02:00

swap_cgroup.c

…

swap_slots.c

…

swap_state.c

mm: swap: get rid of livelock in swapin readahead

2022-03-23 09:13:27 +01:00

swap.c

…

swapfile.c

mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()

2023-04-20 12:10:24 +02:00

truncate.c

mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()

2021-06-30 08:47:27 -04:00

usercopy.c

mm/usercopy: return 1 from hardened_usercopy __setup() handler

2022-04-08 14:40:43 +02:00

userfaultfd.c

mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic()

2022-05-15 20:00:09 +02:00

util.c

mm: Add kvrealloc()

2022-08-21 15:15:21 +02:00

vmacache.c

…

vmalloc.c

mm/vmalloc.c: fix potential memory leak

2021-01-19 18:27:21 +01:00

vmpressure.c

…

vmscan.c

mm: vmscan: fix extreme overreclaim and swap floods

2022-12-02 17:40:04 +01:00

vmstat.c

arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL

2022-05-15 20:00:09 +02:00

workingset.c

Merge tag 'xarray-5.9' of git://git.infradead.org/users/willy/xarray

2020-10-20 14:39:37 -07:00

z3fold.c

mm/z3fold: use release_z3fold_page_locked() to release locked z3fold page

2021-07-14 16:56:51 +02:00

zbud.c

…

zpool.c

…

zsmalloc.c

zsmalloc: fix races between asynchronous zspage free and page migration

2022-06-06 08:42:43 +02:00

zswap.c

…