Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Oleg Nesterov a4761d1472 UPSTREAM: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() ... commit f90fff1e152dedf52b932240ebbd670d83330eca upstream. If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent or debugger right after unlock_task_sighand(). If a concurrent posix_cpu_timer_del() runs at that moment, it won't be able to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or lock_task_sighand() will fail. Add the tsk->exit_state check into run_posix_cpu_timers() to fix this. This fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because exit_task_work() is called before exit_notify(). But the check still makes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail anyway in this case. Bug: 425282960 Cc: stable@vger.kernel.org Reported-by: Benoît Sevens <bsevens@google.com> Fixes: 0bdd2ed413 ("sched: run_posix_cpu_timers: Don't check ->exit_state, use lock_task_sighand()") Signed-off-by: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 78a4b8e379) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I2a9b8114abf2647c346e763edee1d424a07e86fe		2025-06-30 11:40:28 +01:00
..
bpf	This is the 5.4.289 stable release	2025-01-10 07:30:07 +00:00
cgroup	This is the 5.4.294 stable release	2025-06-05 07:11:21 +00:00
configs
debug	kdb: Use the passed prompt in kdb_position_cursor()	2024-08-19 05:33:40 +02:00
dma	This is the 5.4.282 stable release	2024-08-28 08:50:45 +00:00
events	This is the 5.4.292 stable release	2025-04-11 08:16:05 +00:00
gcov	gcov: add support for GCC 14	2024-07-05 09:08:24 +02:00
irq	Revert "genirq: Allow the PM device to originate from irq domain"	2024-08-30 10:05:12 +00:00
livepatch
locking	This is the 5.4.293 stable release	2025-05-05 12:47:34 +00:00
power	This is the 5.4.291 stable release	2025-03-13 14:53:52 +00:00
printk	This is the 5.4.291 stable release	2025-03-13 14:53:52 +00:00
rcu	This is the 5.4.294 stable release	2025-06-05 07:11:21 +00:00
sched	This is the 5.4.292 stable release	2025-04-11 08:16:05 +00:00
time	UPSTREAM: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()	2025-06-30 11:40:28 +01:00
trace	This is the 5.4.294 stable release	2025-06-05 07:11:21 +00:00
.gitignore
acct.c	acct: perform last write from workqueue	2025-03-13 12:43:26 +01:00
async.c	treewide: Remove uninitialized_var() usage	2023-06-09 10:29:01 +02:00
audit.c	audit: Send netlink ACK before setting connection in auditd_set	2024-02-23 08:24:54 +01:00
audit.h
audit_fsnotify.c
audit_tree.c
audit_watch.c	audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()	2023-11-28 16:50:18 +00:00
auditfilter.c
auditsc.c	audit: fix possible soft lockup in __audit_inode_child()	2023-09-23 10:59:46 +02:00
backtracetest.c	treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()	2023-04-20 12:07:32 +02:00
bounds.c	bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS	2024-05-02 16:18:37 +02:00
capability.c
cfi.c
compat.c	sched_getaffinity: don't assume 'cpumask_size()' is fully initialized	2023-04-05 11:16:42 +02:00
configs.c
context_tracking.c
cpu.c	hrtimers: Handle CPU state correctly on hotplug	2025-02-01 18:18:51 +01:00
cpu_pm.c
crash_core.c
crash_dump.c
cred.c	Revert "cred: switch to using atomic_long_t"	2024-01-03 17:00:08 +00:00
delayacct.c
dma.c
exec_domain.c
exit.c	mm: optimize the redundant loop of mm_update_owner_next()	2024-07-18 11:40:51 +02:00
extable.c	kernel/extable.c: use address-of operator on section symbols	2023-06-09 10:29:01 +02:00
fail_function.c	kernel/fail_function: fix memory leak with using debugfs_lookup()	2023-03-11 16:44:15 +01:00
fork.c	This is the 5.4.294 stable release	2025-06-05 07:11:21 +00:00
freezer.c
futex.c	Merge 5.4.246 into android11-5.4-lts	2023-06-20 19:13:58 +00:00
gen_kheaders.sh	This is the 5.4.290 stable release	2025-02-05 17:00:16 +00:00
groups.c
hung_task.c
iomem.c
irq_work.c
jump_label.c
kallsyms.c
kcmp.c
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kcov.c
kexec.c
kexec_core.c	kexec: fix a memory leak in crash_shrink_memory()	2023-07-27 08:37:10 +02:00
kexec_elf.c	kexec: initialize ELF lowest address to ULONG_MAX	2025-04-10 14:29:41 +02:00
kexec_file.c	kexec: support purgatories with .text.hot sections	2023-06-21 15:44:10 +02:00
kexec_internal.h
kheaders.c	kheaders: Use array declaration instead of char	2023-05-17 11:35:33 +02:00
kmod.c
kprobes.c	kprobes: Fix possible use-after-free issue on kprobe registration	2024-05-02 16:18:30 +02:00
ksysfs.c
kthread.c	This is the 5.4.285 stable release	2024-11-09 11:29:17 +00:00
latencytop.c
Makefile
module-internal.h
module.c	This is the 5.4.257 stable release	2023-09-30 11:33:27 +00:00
module_signature.c
module_signing.c
notifier.c
nsproxy.c
padata.c	padata: fix sysfs store callback check	2025-03-13 12:42:56 +01:00
panic.c	panic: Flush kernel log buffer at the end	2024-04-13 12:51:37 +02:00
params.c	module: ensure that kobject_put() is safe for module type kobjects	2025-06-04 14:32:27 +02:00
pid.c
pid_namespace.c
profile.c
ptrace.c
range.c
reboot.c	This is the 5.4.262 stable release	2023-11-29 10:18:14 +00:00
relay.c	relayfs: fix out-of-bounds access in relay_file_read	2023-05-17 11:35:58 +02:00
resource.c	resource: fix region_intersects() vs add_memory_driver_managed()	2024-11-08 16:20:46 +01:00
rseq.c
scs.c
seccomp.c
signal.c	This is the 5.4.285 stable release	2024-11-09 11:29:17 +00:00
smp.c	This is the 5.4.284 stable release	2024-09-12 10:37:37 +00:00
smpboot.c
smpboot.h
softirq.c	Revert "tasklet: Introduce new initialization API"	2025-03-13 17:21:46 +00:00
stackleak.c
stacktrace.c
stop_machine.c
sys.c	Merge 5.4.272 into android11-5.4-lts	2024-04-05 12:37:33 +00:00
sys_ni.c
sysctl-test.c
sysctl.c	This is the 5.4.270 stable release	2024-03-05 14:53:04 +00:00
sysctl_binary.c
task_work.c
taskstats.c
test_kprobes.c
torture.c
tracepoint.c
tsacct.c
ucount.c
uid16.c
uid16.h
umh.c
up.c
user-return-notifier.c
user.c
user_namespace.c
utsname.c
utsname_sysctl.c
watchdog.c
watchdog_hld.c	watchdog/perf: properly initialize the turbo mode timestamp and rearm counter	2024-08-19 05:33:39 +02:00
workqueue.c	Merge 5.4.259 into android11-5.4-lts	2023-10-26 09:18:00 +00:00
workqueue_internal.h