Al Viro 053fc4f755 fuse: fix UAF in rcu pathwalks ...

->permission(), ->get_link() and ->inode_get_acl() might dereference
->s_fs_info (and, in case of ->permission(), ->s_fs_info->fc->user_ns
as well) when called from rcu pathwalk.

Freeing ->s_fs_info->fc is rcu-delayed; we need to make freeing ->s_fs_info
and dropping ->user_ns rcu-delayed too.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

2024-02-25 02:10:32 -05:00

..

acl.c

fs.idmapped.v6.3

2023-02-20 11:53:11 -08:00

control.c

fuse: convert to new timestamp accessors

2023-10-18 14:08:21 +02:00

cuse.c

fuse: fix UAF in rcu pathwalks

2024-02-25 02:10:32 -05:00

dax.c

fuse: dax: set fc->dax to NULL in fuse_dax_conn_free()

2023-12-04 10:16:53 +01:00

dev.c

fuse_dev_ioctl(): switch to fdget()

2023-04-20 22:55:35 -04:00

dir.c

fuse: convert to new timestamp accessors

2023-10-18 14:08:21 +02:00

file.c

vfs-6.8.rw

2024-01-08 11:11:51 -08:00

fuse_i.h

fuse: fix UAF in rcu pathwalks

2024-02-25 02:10:32 -05:00

inode.c

fuse: fix UAF in rcu pathwalks

2024-02-25 02:10:32 -05:00

ioctl.c

fuse: ioctl: translate ENOSYS in outarg

2023-06-21 11:17:36 +02:00

Kconfig

dax: remove CONFIG_DAX_DRIVER

2021-12-04 08:58:51 -08:00

Makefile

fuse: move ioctl to separate source file

2021-04-12 15:04:30 +02:00

readdir.c

fuse: convert to new timestamp accessors

2023-10-18 14:08:21 +02:00

virtio_fs.c

dax: enable dax fault handler to report VM_FAULT_HWPOISON

2023-06-26 07:54:23 -06:00

xattr.c

fuse: move fuse_xattr_handlers to .rodata

2023-10-09 16:24:18 +02:00