Lee Jones 98671fcc32 UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid() ...

[ Upstream commit 83c10cc362 ]

The documentation for find_vpid() clearly states:

  "Must be called with the tasklist_lock or rcu_read_lock() held."

Presently we do neither for find_vpid() instance in bpf_task_fd_query().
Add proper rcu_read_lock/unlock() to fix the issue.

Bug: 232939090
Fixes: 41bdc4b40e ("bpf: introduce bpf subcommand BPF_TASK_FD_QUERY")
Signed-off-by: Lee Jones <lee@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Yonghong Song <yhs@fb.com>
Link: https://lore.kernel.org/bpf/20220912133855.1218900-1-lee@kernel.org
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I517b52d97a22b92be1a479279067ddb7b84efbba

2022-12-08 11:25:09 +00:00

..

bpf

UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid()

2022-12-08 11:25:09 +00:00

cgroup

Merge 5.10.145 into android12-5.10-lts

2022-09-24 09:54:08 +02:00

configs

…

debug

lockdown: also lock down previous kgdb use

2022-05-30 09:33:22 +02:00

dma

Merge 5.10.147 into android12-5.10-lts

2022-10-05 18:33:23 +02:00

entry

KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest

2021-10-06 15:55:49 +02:00

events

Merge 5.10.134 into android12-5.10-lts

2022-08-03 12:42:13 +02:00

gcov

…

irq

Merge 5.10.137 into android12-5.10-lts

2022-08-29 16:53:14 +02:00

kcsan

…

livepatch

livepatch: Fix build failure on 32 bits processors

2022-04-08 14:40:15 +02:00

locking

Merge branch 'android12-5.10' into branch 'android12-5.10-lts'

2022-10-01 14:58:20 +02:00

power

Merge 5.10.137 into android12-5.10-lts

2022-08-29 16:53:14 +02:00

printk

Merge 5.10.110 into android12-5.10-lts

2022-04-18 17:41:18 +02:00

rcu

Merge 5.10.121 into android12-5.10-lts

2022-07-23 16:10:22 +02:00

sched

Merge branch 'android12-5.10' into branch 'android12-5.10-lts'

2022-10-27 09:01:03 +00:00

time

Merge 5.10.137 into android12-5.10-lts

2022-08-29 16:53:14 +02:00

trace

Merge 5.10.145 into android12-5.10-lts

2022-09-24 09:54:08 +02:00

.gitignore

…

acct.c

…

async.c

Revert "module, async: async_synchronize_full() on module init iff async is used"

2022-02-23 12:01:00 +01:00

audit_fsnotify.c

audit: fix potential double free on error path from fsnotify_add_inode_mark

2022-08-31 17:15:13 +02:00

audit_tree.c

…

audit_watch.c

…

audit.c

audit: improve audit queue handling when "audit=1" on cmdline

2022-02-08 18:30:34 +01:00

audit.h

audit: log AUDIT_TIME_* records only from rules

2022-04-08 14:40:00 +02:00

auditfilter.c

…

auditsc.c

audit: log AUDIT_TIME_* records only from rules

2022-04-08 14:40:00 +02:00

backtracetest.c

…

bounds.c

…

capability.c

…

cfi.c

…

compat.c

…

configs.c

…

context_tracking.c

…

cpu_pm.c

PM: cpu: Make notifier chain use a raw_spinlock_t

2021-09-15 09:50:40 +02:00

cpu.c

ANDROID: Fix kenelci build-break for !CONFIG_PERF_EVENTS

2022-10-06 18:00:02 +00:00

crash_core.c

…

crash_dump.c

…

cred.c

…

delayacct.c

…

dma.c

…

exec_domain.c

…

exit.c

Merge 5.10.132 into android12-5.10-lts

2022-07-28 17:17:55 +02:00

extable.c

…

fail_function.c

…

fork.c

Merge 5.10.143 into android12-5.10-lts

2022-09-22 14:38:08 +02:00

freezer.c

…

futex.c

ANDROID: vendor_hooks: Add hooks for oem futex optimization

2022-08-24 00:15:59 +00:00

gen_kheaders.sh

…

groups.c

…

hung_task.c

…

iomem.c

…

irq_work.c

…

jump_label.c

…

kallsyms.c

…

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

…

kexec_core.c

…

kexec_elf.c

…

kexec_file.c

ima: force signature verification when CONFIG_KEXEC_SIG is configured

2022-07-21 21:20:11 +02:00

kexec_internal.h

…

kexec.c

…

kheaders.c

…

kmod.c

…

kprobes.c

kprobes: Prohibit probes in gate area

2022-09-15 11:32:03 +02:00

ksysfs.c

…

kthread.c

…

latencytop.c

…

Makefile

…

module_signature.c

…

module_signing.c

…

module-internal.h

…

module.c

Merge 5.10.118 into android12-5.10-lts

2022-06-06 16:37:12 +02:00

notifier.c

…

nsproxy.c

…

padata.c

…

panic.c

…

params.c

…

pid_namespace.c

memcg: enable accounting for pids in nested pid namespaces

2021-09-18 13:40:36 +02:00

pid.c

Revert "ANDROID: vendor_hooks:vendor hook for pidfd_open"

2022-08-17 07:58:13 +02:00

profile.c

profiling: fix shift too large makes kernel panic

2022-08-21 15:16:05 +02:00

ptrace.c

ptrace: Reimplement PTRACE_KILL by always sending SIGKILL

2022-06-09 10:20:49 +02:00

range.c

…

reboot.c

…

regset.c

…

relay.c

…

resource.c

…

rseq.c

rseq: Remove broken uapi field layout on 32-bit little endian

2022-04-08 14:40:03 +02:00

scftorture.c

scftorture: Fix distribution of short handler delays

2022-06-09 10:21:01 +02:00

scs.c

FROMGIT: scs: Release kasan vmalloc poison in scs_free process

2021-10-04 15:44:53 +00:00

seccomp.c

…

signal.c

Merge tag 'android12-5.10.136_r00' into android12-5.10

2022-09-28 09:54:28 +02:00

smp.c

Merge 5.10.112 into android12-5.10-lts

2022-04-29 09:15:09 +02:00

smpboot.c

…

smpboot.h

…

softirq.c

…

stackleak.c

gcc-plugins/stackleak: Use noinstr in favor of notrace

2022-02-23 12:01:00 +01:00

stacktrace.c

…

static_call.c

…

stop_machine.c

…

sys_ni.c

Merge 5.10.140 into android12-5.10-lts

2022-08-31 18:52:48 +02:00

sys.c

Merge 5.10.69 into android12-5.10-lts

2021-09-30 18:36:17 +02:00

sysctl-test.c

…

sysctl.c

Merge branch 'android12-5.10' into branch 'android12-5.10-lts'

2022-08-16 14:34:54 +02:00

task_work.c

…

taskstats.c

…

test_kprobes.c

…

torture.c

…

tracepoint.c

…

tsacct.c

taskstats: Cleanup the use of task->exit_code

2022-01-27 10:54:33 +01:00

ucount.c

…

uid16.c

…

uid16.h

…

umh.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

Revert "ANDROID: user: Add vendor hook to user for GKI purpose"

2022-01-20 10:04:49 +01:00

usermode_driver.c

…

utsname_sysctl.c

…

utsname.c

…

watch_queue.c

BACKPORT: watchqueue: make sure to serialize 'wqueue->defunct' properly

2022-09-12 07:24:14 +00:00

watchdog_hld.c

…

watchdog.c

Merge 5.10.138 into android12-5.10-lts

2022-08-30 12:59:52 +02:00

workqueue_internal.h

…

workqueue.c

Merge 5.10.146 into android12-5.10-lts

2022-09-29 17:06:30 +02:00