Haimin Zhang
699e794c12
netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc ...
[ Upstream commit 481221775d53d6215a6e5e9ce1cce6d2b4ab9a46 ]
Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
since it may cause a potential kernel information leak issue, as follows:
1. nsim_bpf_map_alloc calls nsim_map_alloc_elem to allocate elements for
a new map.
2. nsim_map_alloc_elem uses kmalloc to allocate map's value, but doesn't
zero it.
3. A user application can use IOCTL BPF_MAP_LOOKUP_ELEM to get specific
element's information in the map.
4. The kernel function map_lookup_elem will call bpf_map_copy_value to get
the information allocated at step-2, then use copy_to_user to copy to the
user buffer.
This can only leak information for an array map.
Fixes: 395cacb5f1https://lore.kernel.org/r/20211215111530.72103-1-tcs.kernel@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-12-22 09:29:38 +01:00
ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
2021-11-17 09:48:47 +01:00
ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
2021-11-06 13:59:45 +01:00
binder: use wake_up_pollfree()
2021-12-14 14:49:02 +01:00
libata: add horkage for ASMedia 1092
2021-12-14 14:49:02 +01:00
auxdisplay: ht16k33: Fix frame buffer device blanking
2021-11-17 09:48:45 +01:00
firmware_loader: fix pre-allocated buf built-in firmware use
2021-11-26 10:47:15 +01:00
bcma: Fix memory leak for internally-handled cores
2021-09-15 09:47:37 +02:00
xen/blkfront: don't trust the backend response data blindly
2021-12-01 09:23:35 +01:00
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
2021-11-17 09:48:34 +01:00
bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
2021-10-13 10:08:19 +02:00
parisc/agp: Annotate parisc agp init functions with __init
2021-12-17 10:12:23 +01:00
clk: Don't parent clks until the parent is fully registered
2021-12-22 09:29:36 +01:00
clocksource/drivers/timer-ti-dm: Select TIMER_OF
2021-11-17 09:48:39 +01:00
counter: 104-quad-8: Return error when invalid mode during ceiling_write
2021-09-15 09:47:34 +02:00
cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
2021-12-08 09:01:11 +01:00
cpuidle: Fix kobject memory leaks in error paths
2021-11-17 09:48:36 +01:00
crypto: qat - disregard spurious PFVF interrupts
2021-11-17 09:48:36 +01:00
dmaengine: st_fdma: fix MODULE_ALIAS
2021-12-22 09:29:36 +01:00
dma-buf: WARN on dmabuf release with pending attachments
2021-11-17 09:48:27 +01:00
EDAC/amd64: Handle three rank interleaving mode
2021-11-17 09:48:36 +01:00
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
2021-12-22 09:29:34 +01:00
fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
2021-09-30 10:09:23 +02:00
gpio: pca953x: Improve bias setting
2021-10-20 11:40:15 +02:00
drm/amd/display: add connector type check for CRC source set
2021-12-17 10:12:24 +01:00
HID: check for valid USB device for many HID drivers
2021-12-14 14:48:59 +01:00
hyperv/vmbus: include linux/bitops.h
2021-11-17 09:48:20 +01:00
hwmon: (dell-smm) Fix warning on /proc/i8k creation error
2021-12-17 10:12:24 +01:00
intel_th: Wait until port is in reset before programming it
2021-07-20 16:10:46 +02:00
i2c: rk3x: Handle a spurious start completion interrupt flag
2021-12-17 10:12:23 +01:00
iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
2021-12-22 09:29:35 +01:00
IB/hfi1: Correct guard on eager buffer deallocation
2021-12-14 14:49:00 +01:00
Input: i8042 - Add quirk for Fujitsu Lifebook T725
2021-11-17 09:48:17 +01:00
iommu: Check if group is NULL before remove device
2021-08-26 08:36:15 -04:00
ipack: ipoctal: fix module reference leak
2021-10-06 15:42:36 +02:00
irqchip: nvic: Fix offset for Interrupt Priority Offsets
2021-12-14 14:49:06 +01:00
isdn: mISDN: Fix sleeping function called from invalid context
2021-10-27 09:54:29 +02:00
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
2021-09-15 09:47:33 +02:00
mcb: fix error handling in mcb_alloc_bus()
2021-09-30 10:09:22 +02:00
dm btree remove: fix use after free in rebalance_children()
2021-12-22 09:29:35 +01:00
media: cec: copy sequence field for the reply
2021-12-01 09:23:28 +01:00
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
2021-11-17 09:48:42 +01:00
memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
2021-11-17 09:48:37 +01:00
mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
2021-09-22 12:26:44 +02:00
misc: fastrpc: fix improper packet size calculation
2021-12-14 14:49:06 +01:00
mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
2021-12-01 09:23:29 +01:00
mtd: rawnand: fsmc: Fix timing computation
2021-12-14 14:49:03 +01:00
netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
2021-12-22 09:29:38 +01:00
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
2021-11-17 09:48:47 +01:00
NTB: perf: Fix an error code in perf_setup_inbuf()
2021-09-22 12:26:44 +02:00
libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
2021-10-06 15:42:38 +02:00
nvmet: use IOCB_NOWAIT only if the filesystem supports it
2021-12-01 09:23:33 +01:00
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
2021-10-20 11:40:14 +02:00
of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
2021-09-22 12:26:34 +02:00
opp: Fix return in _opp_add_static_v2()
2021-11-17 09:48:44 +01:00
parisc: Move pci_dev_is_behind_card_dino to where it is used
2021-09-26 14:07:10 +02:00
parport: remove non-zero check on count
2021-09-22 12:26:36 +02:00
PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
2021-12-01 09:23:31 +01:00
pcmcia: i82092: fix a null pointer dereference bug
2021-08-12 13:21:03 +02:00
phy: qcom-qusb2: Fix a memory leak on probe
2021-11-17 09:48:43 +01:00
pinctrl: armada-37xx: Correct PWM pins definitions
2021-12-01 09:23:31 +01:00
platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
2021-12-08 09:01:09 +01:00
power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
2021-11-17 09:48:44 +01:00
ptp_pch: Load module automatically if ID matches
2021-10-13 10:08:19 +02:00
pwm: stm32-lp: Don't modify HW state in .remove() callback
2021-09-26 14:07:13 +02:00
regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
2021-11-17 09:48:22 +01:00
reset: socfpga: add empty driver allowing consumers to probe
2021-11-17 09:48:20 +01:00
rtc: rx8010: select REGMAP_I2C
2021-09-26 14:07:14 +02:00
s390/cio: make ccw_device_dma_* more robust
2021-11-17 09:48:50 +01:00
scsi: iscsi: Unblock session then wake up error handler
2021-12-08 09:01:09 +01:00
maple: fix wrong return value of maple_bus_init().
2021-11-26 10:47:17 +01:00
slimbus: ngd: reset dma setup during runtime pm
2021-08-26 08:36:21 -04:00
soc/tegra: fuse: Fix bitwise vs. logical OR warning
2021-12-22 09:29:37 +01:00
spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
2021-11-17 09:48:33 +01:00
staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
2021-12-01 09:23:28 +01:00
scsi: target: Fix alua_tg_pt_gps_count tracking
2021-11-26 10:47:16 +01:00
tee: optee: Fix missing devices unregister during optee_remove
2021-10-27 09:54:25 +02:00
thermal: core: Reset previous low and high trip during thermal zone init
2021-12-08 09:01:09 +01:00
serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30
2021-12-14 14:48:58 +01:00
xhci: avoid race between disable slot command and host runtime suspend
2021-12-14 14:49:04 +01:00
vfio: Use config not menuconfig for VFIO_NOIOMMU
2021-09-22 12:26:23 +02:00
vhost/vsock: fix incorrect used length reported to the guest
2021-12-01 09:23:34 +01:00
vgacon: Propagate console boot parameters before calling `vc_resize'
2021-12-08 09:01:13 +01:00
virtio_ring: Fix querying of maximum DMA mapping size for virtio device
2021-12-22 09:29:34 +01:00
ar7: fix kernel builds for compiler test
2021-11-17 09:48:46 +01:00
xen: detect uninitialized xenbus in xenbus_init
2021-12-01 09:23:28 +01:00
699e794c12