diff options
| author | Jann Horn <jannh@google.com> | 2026-05-19 16:29:38 +0200 |
|---|---|---|
| committer | Christian Brauner <brauner@kernel.org> | 2026-05-22 15:19:26 +0200 |
| commit | 9c954499d43aefac01c5dfb57a82b13d2dcf4b94 (patch) | |
| tree | 8c9c1350c56e8ade4cf83594e835a0e08ea1a51f /scripts/stackusage | |
| parent | 4e3d1b2c48ca6c55f1e9ca7f8dccc76f120f276c (diff) | |
fuse: reject fuse_notify() pagecache ops on directories
The operations FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE allow the
FUSE daemon to actively write/read pagecache contents.
For directories with FOPEN_CACHE_DIR, the pagecache is used as
kernel-internal cache storage, and userspace is not supposed to have
direct access to this cache - in particular, fuse_parse_cache() will hit
WARN_ON() if the cache contains bogus data.
Reject FUSE_NOTIFY_STORE and FUSE_NOTIFY_RETRIEVE on anything other than
regular files with -EINVAL.
Fixes: 5d7bc7e8680c ("fuse: allow using readdir cache")
Cc: stable@vger.kernel.org
Signed-off-by: Jann Horn <jannh@google.com>
Link: https://patch.msgid.link/20260519-fuse-dir-pagecache-v2-1-5428fa48e175@google.com
Acked-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
Diffstat (limited to 'scripts/stackusage')
0 files changed, 0 insertions, 0 deletions