Lee Jones 98671fcc32 UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid() ...

[ Upstream commit 83c10cc362 ]

The documentation for find_vpid() clearly states:

  "Must be called with the tasklist_lock or rcu_read_lock() held."

Presently we do neither for find_vpid() instance in bpf_task_fd_query().
Add proper rcu_read_lock/unlock() to fix the issue.

Bug: 232939090
Fixes: 41bdc4b40e ("bpf: introduce bpf subcommand BPF_TASK_FD_QUERY")
Signed-off-by: Lee Jones <lee@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Yonghong Song <yhs@fb.com>
Link: https://lore.kernel.org/bpf/20220912133855.1218900-1-lee@kernel.org
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I517b52d97a22b92be1a479279067ddb7b84efbba

2022-12-08 11:25:09 +00:00

..

preload

…

arraymap.c

bpf: Acquire map uref in .init_seq_private for array map iterator

2022-08-25 11:37:55 +02:00

bpf_inode_storage.c

…

bpf_iter.c

…

bpf_local_storage.c

…

bpf_lru_list.c

…

bpf_lru_list.h

…

bpf_lsm.c

…

bpf_struct_ops_types.h

…

bpf_struct_ops.c

…

btf.c

…

cgroup.c

bpf, cgroup: Fix kernel BUG in purge_effective_progs

2022-09-08 11:11:36 +02:00

core.c

…

cpumap.c

…

devmap.c

…

disasm.c

…

disasm.h

…

dispatcher.c

…

hashtab.c

bpf: Acquire map uref in .init_seq_private for hash map iterator

2022-08-25 11:37:55 +02:00

helpers.c

…

inode.c

…

local_storage.c

…

lpm_trie.c

…

Makefile

…

map_in_map.c

…

map_in_map.h

…

map_iter.c

…

net_namespace.c

…

offload.c

…

percpu_freelist.c

…

percpu_freelist.h

…

prog_iter.c

…

queue_stack_maps.c

…

reuseport_array.c

…

ringbuf.c

…

stackmap.c

…

syscall.c

UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid()

2022-12-08 11:25:09 +00:00

sysfs_btf.c

…

task_iter.c

…

tnum.c

…

trampoline.c

…

verifier.c

Merge 5.10.140 into android12-5.10-lts

2022-08-31 18:52:48 +02:00