]> www.infradead.org Git - users/jedix/linux-maple.git/commit
tracing: Fix filter logic error
authorEdward Adam Davis <eadavis@qq.com>
Tue, 24 Jun 2025 06:38:46 +0000 (14:38 +0800)
committerSteven Rostedt (Google) <rostedt@goodmis.org>
Fri, 27 Jun 2025 19:51:36 +0000 (15:51 -0400)
commit6921d1e07cb5eddec830801087b419194fde0803
treee4b0fed513f8e4edbfa80c7559c3870c4e3624d4
parent86731a2a651e58953fc949573895f2fa6d456841
tracing: Fix filter logic error

If the processing of the tr->events loop fails, the filter that has been
added to filter_head will be released twice in free_filter_list(&head->rcu)
and __free_filter(filter).

After adding the filter of tr->events, add the filter to the filter_head
process to avoid triggering uaf.

Link: https://lore.kernel.org/tencent_4EF87A626D702F816CD0951CE956EC32CD0A@qq.com
Fixes: a9d0aab5eb33 ("tracing: Fix regression of filter waiting a long time on RCU synchronization")
Reported-by: syzbot+daba72c4af9915e9c894@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=daba72c4af9915e9c894
Tested-by: syzbot+daba72c4af9915e9c894@syzkaller.appspotmail.com
Acked-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Signed-off-by: Edward Adam Davis <eadavis@qq.com>
Signed-off-by: Steven Rostedt (Google) <rostedt@goodmis.org>
kernel/trace/trace_events_filter.c