]> www.infradead.org Git - users/jedix/linux-maple.git/commit
Revert "uprobes: use vm_special_mapping close() functionality"
authorOleg Nesterov <oleg@redhat.com>
Wed, 11 Sep 2024 13:13:20 +0000 (15:13 +0200)
committerAndrew Morton <akpm@linux-foundation.org>
Tue, 17 Sep 2024 08:07:01 +0000 (01:07 -0700)
commited8d5b0ce1d738e13c60d6b1a901a56d832e5070
tree1e94644a1af1b9af23b159bdd273c8101bee2482
parent242d12c98174584a18965cfab95778893872d650
Revert "uprobes: use vm_special_mapping close() functionality"

This reverts commit 08e28de1160a712724268fd33d77b32f1bc84d1c.

A malicious application can munmap() its "[uprobes]" vma and in this case
xol_mapping.close == uprobe_clear_state() will free the memory which can
be used by another thread, or the same thread when it hits the uprobe bp
afterwards.

Link: https://lkml.kernel.org/r/20240911131320.GA3448@redhat.com
Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Cc: Adrian Hunter <adrian.hunter@intel.com>
Cc: Alexander Shishkin <alexander.shishkin@linux.intel.com>
Cc: Andrii Nakryiko <andrii@kernel.org>
Cc: Arnaldo Carvalho de Melo <acme@kernel.org>
Cc: Ian Rogers <irogers@google.com>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: Jiri Olsa <jolsa@kernel.org>
Cc: Kan Liang <kan.liang@linux.intel.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Mark Rutland <mark.rutland@arm.com>
Cc: Masami Hiramatsu <mhiramat@kernel.org>
Cc: Michael Ellerman <mpe@ellerman.id.au>
Cc: Namhyung Kim <namhyung@kernel.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Sven Schnelle <svens@linux.ibm.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
include/linux/uprobes.h
kernel/events/uprobes.c
kernel/fork.c