diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2026-06-15 02:34:37 +0530 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2026-06-15 02:34:37 +0530 |
| commit | d2cb5e633c6e8f2fb9af57e72fb05899952b1e3c (patch) | |
| tree | 26c291704709fd0ad60d6898c5a5052d9402dcdf /rust/kernel/alloc | |
| parent | 8cd9520d35a6c38db6567e97dd93b1f11f185dc6 (diff) | |
| parent | 07410646f6ff1d23222f105ccab778957d401bbe (diff) | |
Merge tag 'vfs-7.2-rc1.kfunc' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
Pull bpf filesystem kfunc fix from Christian Brauner:
"The bpf_set_dentry_xattr() and bpf_remove_dentry_xattr() kfuncs locked
the inode of the supplied dentry without checking whether the dentry
is negative.
Passing a negative dentry (e.g., from security_inode_create) caused a
NULL pointer dereference. Negative dentries now fail with EINVAL. The
WARN_ON(!inode) in the bpf xattr permission helpers is dropped as well
since it could be triggered the same way, amounting to a denial of
service on systems with panic_on_warn enabled"
* tag 'vfs-7.2-rc1.kfunc' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs:
bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries
Diffstat (limited to 'rust/kernel/alloc')
0 files changed, 0 insertions, 0 deletions