Kalesh Singh
d4d6a087de
FROMGIT: procfs: prevent unpriveleged processes accessing fdinfo dir ...
The file permissions on the fdinfo dir from were changed from
S_IRUSR|S_IXUSR to S_IRUGO|S_IXUGO, and a PTRACE_MODE_READ check was added
for opening the fdinfo files [1]. However, the ptrace permission check
was not added to the directory, allowing anyone to get the open FD numbers
by reading the fdinfo directory.
Add the missing ptrace permission check for opening the fdinfo directory.
[1] https://lkml.kernel.org/r/20210308170651.919148-1-kaleshsingh@google.com
Link: https://lkml.kernel.org/r/20210713162008.1056986-1-kaleshsingh@google.com
Fixes: 7bc3fa0172a4 ("procfs: allow reading fdinfo with PTRACE_MODE_READ")
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>
Cc: Kees Cook <keescook@chromium.org>
Cc: Eric W. Biederman <ebiederm@xmission.com>
Cc: Christian Brauner <christian.brauner@ubuntu.com>
Cc: Christian König <christian.koenig@amd.com>
Cc: Suren Baghdasaryan <surenb@google.com>
Cc: Hridya Valsaraju <hridya@google.com>
Cc: Jann Horn <jannh@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Mark Brown <broonie@kernel.org>
Bug: 151772539
Change-Id: I274b30aa0a5ce8412eae7161d31c6ee955035da9
(cherry picked from commit fc73829fa54b0c7af32d6da7c972eb3390957da4
git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master)
Signed-off-by: Kalesh Singh <kaleshsingh@google.com>
2026-05-07 10:19:32 -04:00
This is the 5.4.302 stable release
2025-12-03 14:36:44 +00:00
affs: don't write overlarge OFS data block size fields
2025-04-10 14:29:42 +02:00
This is the 5.4.291 stable release
2025-03-13 14:53:52 +00:00
autofs: fix memory leak of waitqueues in autofs_catatonic_mode
2023-09-23 11:00:02 +02:00
bfs: don't use WARNING: string when it's just info.
2021-01-06 14:48:39 +01:00
This is the 5.4.302 stable release
2025-12-03 14:36:44 +00:00
cachefiles: fix memory leak in cachefiles_add_cache()
2024-03-06 14:36:10 +00:00
This is the 5.4.302 stable release
2025-12-03 14:36:44 +00:00
This is the 5.4.299 stable release
2025-09-10 05:55:28 +00:00
coda: Avoid partial allocation of sig_inputArgs
2023-03-11 16:43:56 +01:00
configfs: Do not override creating attribute file failure in populate_attrs()
2025-06-27 11:02:50 +01:00
cramfs: Verify inode mode when loading from disk
2025-10-29 13:59:55 +01:00
UPSTREAM: fscrypt: fix derivation of SipHash keys on big endian CPUs
2022-11-22 07:58:42 +00:00
new helper: lookup_positive_unlocked()
2023-09-23 10:59:40 +02:00
fsnotify: fix fsnotify hooks in pseudo filesystems
2022-02-01 17:24:34 +01:00
dlm: check for defined force value in dlm_lockspace_release
2025-10-29 13:59:58 +01:00
This is the 5.4.278 stable release
2024-06-18 14:18:49 +00:00
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
2025-09-04 14:05:55 +02:00
Merge tag 'ASB-2025-02-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-02-06 22:53:05 +02:00
Merge branch 'for-kernel-version-from-4.1.0' of https://github.com/namjaejeon/linux-exfat-oot into android13-5.4-lahaina
2024-04-16 00:03:08 +03:00
This is the 5.4.257 stable release
2023-09-30 11:33:27 +00:00
BACKPORT: mm: remove the pgprot argument to __vmalloc
2026-01-14 17:48:09 -08:00
Merge tag 'ASB-2025-10-06_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-10-08 15:17:54 +03:00
fat: fix uninitialized variable
2024-11-08 16:20:47 +01:00
BACKPORT: sysctl: pass kernel pointers to ->proc_handler
2025-12-23 13:36:15 -08:00
Merge branch 'android11-5.4-lts' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-10-08 15:23:13 +03:00
BACKPORT: mm: remove the pgprot argument to __vmalloc
2026-01-14 17:48:09 -08:00
This is the 5.4.301 stable release
2025-10-30 07:52:10 +00:00
This is the 5.4.301 stable release
2025-10-30 07:52:10 +00:00
hostfs: fix memory handling in follow_link()
2021-04-14 08:24:14 +02:00
fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
2025-12-03 12:45:14 +01:00
mm/hugetlb: fix folio is still mapped when deleted
2025-10-02 13:34:35 +02:00
ANDROID: incremental fs: Evict inodes before freeing mount data
2023-04-05 13:07:49 -07:00
This is the 5.4.270 stable release
2024-03-05 14:53:04 +00:00
isofs: Verify inode mode when loading from disk
2025-08-28 16:21:15 +02:00
jbd2: ensure that all ongoing I/O complete before freeing blocks
2025-10-29 14:00:01 +01:00
This is the 5.4.295 stable release
2025-06-30 08:05:33 +00:00
This is the 5.4.302 stable release
2025-12-03 14:36:44 +00:00
UPSTREAM: kernfs: Add option to enable user xattrs
2026-01-14 18:13:12 -08:00
fs: lockd: avoid possible wrong NULL parameter
2023-09-23 10:59:48 +02:00
minixfs: Verify inode mode when loading from disk
2025-10-29 13:59:55 +01:00
BACKPORT: mm: remove the pgprot argument to __vmalloc
2026-01-14 17:48:09 -08:00
nfs_common: need lock during iterate through the list
2020-12-30 11:51:22 +01:00
NFSD: Fix last write offset handling in layoutcommit
2025-10-29 14:00:01 +01:00
nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
2025-10-02 13:34:31 +02:00
Revert "fs/nls: make load_nls() take a const parameter"
2023-09-30 15:41:35 +00:00
This is the 5.4.251 stable release
2023-08-03 10:56:28 +00:00
BACKPORT: mm: remove the pgprot argument to __vmalloc
2026-01-14 17:48:09 -08:00
This is the 5.4.301 stable release
2025-10-30 07:52:10 +00:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
openpromfs: finish conversion to the new mount API
2024-06-16 13:28:32 +02:00
This is the 5.4.302 stable release
2025-12-03 14:36:44 +00:00
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-09-12 18:48:05 +03:00
FROMGIT: procfs: prevent unpriveleged processes accessing fdinfo dir
2026-05-07 10:19:32 -04:00
Merge tag 'ASB-2024-06-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2024-06-22 17:58:09 +03:00
qnx4: work around gcc false positive warning bug
2021-09-30 10:09:26 +02:00
BACKPORT: sysctl: pass kernel pointers to ->proc_handler
2025-12-23 13:36:15 -08:00
ramfs: fix nommu mmap with gaps in the page cache
2020-10-29 09:57:53 +01:00
This is the 5.4.257 stable release
2023-09-30 11:33:27 +00:00
romfs: fix uninitialized memory leak in romfs_dev_read()
2020-08-26 10:40:51 +02:00
This is the 5.4.301 stable release
2025-10-30 07:52:10 +00:00
This is the 5.4.275 stable release
2024-05-15 16:00:38 +00:00
sysv: don't call sb_bread() with pointers_lock held
2024-04-13 12:51:38 +02:00
This is the 5.4.257 stable release
2023-09-30 11:33:27 +00:00
BACKPORT: mm: remove the pgprot argument to __vmalloc
2026-01-14 17:48:09 -08:00
fs: udf: fix OOB read in lengthAllocDescs handling
2025-10-29 13:59:54 +01:00
Revert "ANDROID: Revert: Merge 5.4.60 into android11-5.4"
2020-08-23 13:12:51 +02:00
Revert "unicode: Don't special case ignorable code points"
2024-12-14 19:44:55 +01:00
This is the 5.4.257 stable release
2023-09-30 11:33:27 +00:00
BACKPORT: mm: remove the pgprot argument to __vmalloc
2026-01-14 17:48:09 -08:00
BACKPORT: FROMLIST: Revert "mremap: don't allow MREMAP_DONTUNMAP on special_mappings and aio"
2025-05-18 08:08:42 +00:00
UPSTREAM: fs: anon_inodes: rephrase to appropriate kernel-doc
2025-02-20 04:17:46 +02:00
attr: block mode changes of symlinks
2023-09-23 11:00:06 +02:00
binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf
2023-01-18 11:41:46 +01:00
elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
2021-10-06 15:42:35 +02:00
fs: binfmt_elf_efpic: don't use missing interpreter's properties
2024-09-04 13:14:54 +02:00
binfmt_flat: Fix integer overflow bug on 32 bit systems
2025-03-13 12:43:07 +01:00
binfmt_misc: cleanup on filesystem umount
2024-09-04 13:14:53 +02:00
block: Don't invalidate pagecache for invalid falloc modes
2024-01-08 11:29:48 +01:00
Merge tag 'ASB-2025-10-06_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-10-08 15:17:54 +03:00
chardev: fix error handling in cdev_device_add()
2023-01-18 11:41:25 +01:00
lsm: new security_file_ioctl_compat() hook
2024-02-23 08:25:15 +01:00
Revert "coredump: hand a pidfd to the usermode coredump helper"
2025-06-05 07:57:32 +00:00
fs: fix NULL dereference due to data race in prepend_path()
2020-12-15 11:43:16 +05:30
dax: fix cache flush on PMD-mapped pages
2022-06-14 18:11:41 +02:00
BACKPORT: sysctl: pass kernel pointers to ->proc_handler
2025-12-23 13:36:15 -08:00
This is the 5.4.112 stable release
2021-04-14 12:07:53 +02:00
BACKPORT: sysctl: pass kernel pointers to ->proc_handler
2025-12-23 13:36:15 -08:00
eventfd: prevent underflow for eventfd semaphores
2023-09-23 10:59:40 +02:00
UPSTREAM: epoll: add syscall epoll_pwait2
2025-12-22 04:28:19 +02:00
This is the 5.4.301 stable release
2025-10-30 07:52:10 +00:00
fs: Fix file_set_fowner LSM hook inconsistencies
2024-11-08 16:20:34 +01:00
do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
2024-03-26 18:22:13 -04:00
UPSTREAM: fs: prevent out-of-bounds array speculation when closing a file descriptor
2026-01-18 00:27:36 -08:00
BACKPORT: sysctl: pass kernel pointers to ->proc_handler
2025-12-23 13:36:15 -08:00
fs/filesystems: Fix potential unsigned integer underflow in fs_name()
2025-06-27 11:02:50 +01:00
fs/fs-writeback.c: adjust dirtytime_interval_handler definition to match prototype
2026-02-01 20:38:24 -08:00
fs: avoid empty option when generating legacy mount string
2023-07-27 08:37:25 +02:00
Revert "ANDROID: sdcardfs: Enable modular sdcardfs"
2020-05-29 15:08:00 +02:00
BACKPORT: sysctl: pass kernel pointers to ->proc_handler
2025-12-23 13:36:15 -08:00
fs: Establish locking order for unrelated directories
2023-07-27 08:37:26 +02:00
This is the 5.4.278 stable release
2024-06-18 14:18:49 +00:00
Merge tag 'ASB-2025-06-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-06-30 10:49:17 +03:00
UPSTREAM: fs: add LSM-supporting anon-inode interface
2025-02-20 04:17:45 +02:00
filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64
2024-09-04 13:15:02 +02:00
exfat: add Kconfig and Makefile
2020-11-10 14:30:28 +08:00
mbcache: Avoid nesting of cache->c_list_lock under bit locks
2023-01-18 11:41:59 +01:00
This is the 5.4.292 stable release
2025-04-11 08:16:05 +00:00
This is the 5.4.301 stable release
2025-10-30 07:52:10 +00:00
UPSTREAM: fs/nsfs.c: Added ns_match
2025-12-23 13:36:04 -08:00
UPSTREAM: close_range: add CLOSE_RANGE_UNSHARE
2025-12-22 03:48:31 +02:00
ANDROID: Add OWNERS files referring to the respective android-mainline OWNERS
2021-04-01 13:45:14 +00:00
pipe: increase minimum default pipe size to 2 pages
2021-08-12 13:21:02 +02:00
This is the 5.4.229 stable release
2023-01-18 12:21:41 +00:00
This is the 5.4.106 stable release
2021-03-17 17:55:32 +01:00
ANDROID: GKI: set vfs-only exports into their own namespace
2020-07-07 18:07:10 +02:00
readdir: make sure to verify directory entry for legacy interfaces too
2021-04-21 12:56:16 +02:00
fs/select: rework stack allocation hack for clang
2024-03-26 18:22:13 -04:00
seq_file: disallow extremely large seq buffer allocations
2021-07-20 16:10:54 +02:00
Revert "io_uring: disable polling pollfree files"
2022-09-21 15:47:16 +02:00
Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
2022-10-17 17:24:32 +02:00
This is the 5.4.191 stable release
2022-04-27 14:24:26 +02:00
statfs: enforce statfs[64] structure initialization
2023-05-30 12:44:07 +01:00
fs: explicitly unregister per-superblock BDIs
2024-11-08 16:20:26 +01:00
This is the 5.4.263 stable release
2023-12-11 12:08:17 +00:00
Revert "mm: protect VMA modifications using VMA sequence count"
2025-05-24 05:44:09 +00:00
Revert "ANDROID: vfs: Add setattr2 for filesystems with per mount permissions"
2020-05-29 14:48:38 +02:00
UPSTREAM: kernfs: Add removed_size out param for simple_xattr_set
2026-01-14 18:13:12 -08:00
d4d6a087de