iMX/i2som-imx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
774df9928fd150d9d7cc0c1924ece04591cb4652
i2som-imx-linux/fs
History
Kirill A. Shutemov 26f7f4d46a pagemap: do not leak physical addresses to non-privileged userspace 
commit ab676b7d6f upstream.

As pointed by recent post[1] on exploiting DRAM physical imperfection,
/proc/PID/pagemap exposes sensitive information which can be used to do
attacks.

This disallows anybody without CAP_SYS_ADMIN to read the pagemap.

[1] http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html

[ Eventually we might want to do anything more finegrained, but for now
  this is the simple model.   - Linus ]

Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
Acked-by: Konstantin Khlebnikov <khlebnikov@openvz.org>
Acked-by: Andy Lutomirski <luto@amacapital.net>
Cc: Pavel Emelyanov <xemul@parallels.com>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Mark Seaborn <mseaborn@chromium.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2015-03-26 15:06:57 +01:00
..
9p
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2014-01-28 08:38:04 -08:00
adfs
…
affs
fs/affs/super.c: bugfix / double free
2014-06-07 10:28:16 -07:00
afs
afs: proc cells and rootcell are writeable
2014-02-01 10:59:39 -08:00
autofs4
autofs4 copy_dev_ioctl(): keep the value of ->size we'd used for allocation
2015-03-18 13:31:30 +01:00
befs
befs: iget_locked() doesn't return an ERR_PTR
2014-01-25 03:14:38 -05:00
bfs
…
btrfs
Btrfs:__add_inode_ref: out of bounds memory read when looking for extended ref.
2015-03-18 13:31:27 +01:00
cachefiles
…
ceph
ceph: fix null pointer dereference in discard_cap_releases()
2015-01-16 06:59:33 -08:00
cifs
Complete oplock break jobs before closing file handle
2015-02-11 14:54:47 +08:00
coda
…
configfs
…
cramfs
mm: remove read_cache_page_async()
2014-11-21 09:23:06 -08:00
debugfs
debugfs: leave freeing a symlink body until inode eviction
2015-03-18 13:31:30 +01:00
devpts
…
dlm
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2014-01-25 11:17:34 -08:00
ecryptfs
eCryptfs: Remove buggy and unnecessary write in file name decode routine
2015-01-08 10:00:51 -08:00
efivarfs
…
efs
efs: get rid of ->put_super()
2014-01-25 03:13:02 -05:00
exofs
exofs: Print less in r4w
2014-01-23 18:54:14 +02:00
exportfs
…
ext2
ext2/3/4: use generic posix ACL infrastructure
2014-01-25 23:58:19 -05:00
ext3
ext3: Don't check quota format when there are no quota files
2014-11-14 09:00:09 -08:00
ext4
ext4: prevent bugon on race between write/fcntl
2015-02-11 14:54:48 +08:00
f2fs
mm: non-atomically mark page accessed during page cache allocation where possible
2015-01-29 17:40:52 -08:00
fat
…
freevxfs
…
fscache
FS-Cache: Handle removal of unadded object to the fscache_object_list rb tree
2014-02-17 13:47:35 -08:00
fuse
fuse: notify: don't move pages
2015-03-26 15:06:53 +01:00
gfs2
mm: non-atomically mark page accessed during page cache allocation where possible
2015-01-29 17:40:52 -08:00
hfs
…
hfsplus
hfsplus: add HFSX subfolder count support
2014-03-10 17:26:21 -07:00
hostfs
um: hostfs: make functions static
2014-01-26 11:51:09 +01:00
hpfs
hpfs: optimize quad buffer loading
2014-02-02 16:24:07 -08:00
hppfs
…
hugetlbfs
hugetlb: ensure hugepage access is denied if hugepages are not supported
2014-10-09 12:21:27 -07:00
isofs
isofs: Fix unchecked printing of ER records
2015-01-08 10:00:49 -08:00
jbd
…
jbd2
jbd2: free bh when descriptor block checksum fails
2014-11-14 08:59:57 -08:00
jffs2
jffs2: fix handling of corrupted summary length
2015-03-06 14:43:32 -08:00
jfs
jfs: set i_ctime when setting ACL
2014-02-13 15:56:05 -06:00
kernfs
kernfs: add back missing error check in kernfs_fop_mmap()
2014-06-07 10:28:08 -07:00
lockd
LOCKD: Fix a race when initialising nlmsvc_timeout
2015-01-27 08:18:58 -08:00
logfs
Merge branch 'for-3.14/core' of git://git.kernel.dk/linux-block
2014-01-30 11:19:05 -08:00
minix
…
ncpfs
ncpfs: return proper error from NCP_IOC_SETROOT ioctl
2015-01-08 10:00:50 -08:00
nfs
NFSv4: Don't call put_rpccred() under the rcu_read_lock()
2015-03-18 13:31:34 +01:00
nfs_common
…
nfsd
nfsd4: fix xdr4 inclusion of escaped char
2015-01-16 06:59:33 -08:00
nilfs2
nilfs2: fix deadlock of segment constructor during recovery
2015-03-26 15:06:56 +01:00
nls
nls: have register_nls() set ->owner
2014-01-25 03:14:05 -05:00
notify
fsnotify: next_i is freed during fsnotify_unmount_inodes.
2015-01-27 08:18:59 -08:00
ntfs
mm: non-atomically mark page accessed during page cache allocation where possible
2015-01-29 17:40:52 -08:00
ocfs2
ocfs2: fix the wrong directory passed to ocfs2_lookup_ino_from_name() when link file
2015-01-16 06:59:29 -08:00
omfs
…
openpromfs
…
proc
pagemap: do not leak physical addresses to non-privileged userspace
2015-03-26 15:06:57 +01:00
pstore
pstore: Fix NULL pointer fault if get NULL prz in ramoops_get_next_prz
2015-02-05 22:35:52 -08:00
qnx4
qnx4: clean qnx4_fill_super() up
2014-01-25 03:13:03 -05:00
qnx6
…
quota
quota: Properly return errors from dquot_writeback_dquots()
2014-11-14 09:00:09 -08:00
ramfs
fs/ramfs: move ramfs_aops to inode.c
2014-01-23 16:36:58 -08:00
reiserfs
reiserfs: call truncate_setsize under tailpack mutex
2014-07-06 18:57:29 -07:00
romfs
romfs: fix returm err while getting inode in fill_super
2014-01-23 16:37:04 -08:00
squashfs
…
sysfs
sysfs: make sure read buffer is zeroed
2014-06-07 10:28:24 -07:00
sysv
…
ubifs
UBIFS: fix free log space calculation
2014-11-14 08:59:46 -08:00
udf
udf: Verify symlink size before loading it
2015-01-08 10:00:50 -08:00
ufs
…
xfs
xfs: Fix quota type in quota structures when reusing quota file
2015-03-06 14:43:31 -08:00
aio.c
aio: fix uncorrent dirty pages accouting when truncating AIO ring buffer
2014-12-06 15:55:37 -08:00
anon_inodes.c
vfs: Allocate anon_inode_inode in anon_inode_init()
2014-03-27 09:52:54 -07:00
attr.c
fs,userns: Change inode_capable to capable_wrt_inode_uidgid
2014-06-16 13:40:32 -07:00
bad_inode.c
…
binfmt_aout.c
…
binfmt_elf_fdpic.c
…
binfmt_elf.c
x86, mm/ASLR: Fix stack randomization on 64-bit systems
2015-03-06 14:43:32 -08:00
binfmt_em86.c
…
binfmt_flat.c
…
binfmt_misc.c
…
binfmt_script.c
…
binfmt_som.c
…
bio-integrity.c
bio-integrity: Drop bio_integrity_verify BUG_ON in post bip->bip_iter world
2014-02-21 15:56:36 -08:00
bio.c
block: Fix cloning of discard/write same bios
2014-02-11 08:40:45 -07:00
block_dev.c
…
buffer.c
mm: non-atomically mark page accessed during page cache allocation where possible
2015-01-29 17:40:52 -08:00
char_dev.c
…
compat_binfmt_elf.c
…
compat_ioctl.c
fs/compat_ioctl.c: fix an underflow issue (harmless)
2014-01-21 16:19:42 -08:00
compat.c
…
coredump.c
coredump: fix the setting of PF_DUMPCORE
2014-07-31 12:52:56 -07:00
dcache.c
missing data dependency barrier in prepend_name()
2014-11-14 08:59:48 -08:00
dcookies.c
fs/compat: fix lookup_dcookie() parameter handling
2014-01-29 16:22:40 -08:00
direct-io.c
…
drop_caches.c
…
eventfd.c
eventfd_ctx_fdget(): use fdget() instead of fget()
2014-01-25 03:13:04 -05:00
eventpoll.c
eventpoll: fix uninitialized variable in epoll_ctl
2014-10-05 14:52:20 -07:00
exec.c
mm: per-thread vma caching
2014-10-09 12:21:29 -07:00
fcntl.c
…
fhandle.c
…
file_table.c
don't bother with {get,put}_write_access() on non-regular files
2014-05-31 13:20:29 -07:00
file.c
vfs: Don't let __fdget_pos() get FMODE_PATH files
2014-03-23 00:03:12 -04:00
filesystems.c
…
fs_struct.c
…
fs-writeback.c
writeback: fix a subtle race condition in I_DIRTY clearing
2015-01-16 06:59:32 -08:00
inode.c
fs,userns: Change inode_capable to capable_wrt_inode_uidgid
2014-06-16 13:40:32 -07:00
internal.h
…
ioctl.c
…
ioprio.c
block: Fix computation of merged request priority
2014-11-21 09:23:03 -08:00
Kconfig
fs: remove generic_acl
2014-01-26 08:26:40 -05:00
Kconfig.binfmt
…
libfs.c
…
locks.c
locks: eliminate BUG() call when there's an unexpected lock on file close
2014-12-06 15:55:39 -08:00
Makefile
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2014-01-28 08:38:04 -08:00
mbcache.c
…
mount.h
switch mnt_hash to hlist
2014-03-30 19:18:51 -04:00
mpage.c
…
namei.c
fs: allow open(dir, O_TMPFILE|..., 0) with mode 0
2014-11-14 08:59:46 -08:00
namespace.c
umount: Disallow unprivileged mount force
2015-01-08 10:00:49 -08:00
no-block.c
…
open.c
don't bother with {get,put}_write_access() on non-regular files
2014-05-31 13:20:29 -07:00
pipe.c
fs/pipe.c: skip file_update_time on frozen fs
2014-01-23 16:37:00 -08:00
pnode.c
get rid of propagate_umount() mistakenly treating slaves as busy.
2014-09-17 09:19:22 -07:00
pnode.h
smarter propagate_mnt()
2014-05-06 07:59:36 -07:00
posix_acl.c
posix_acl: handle NULL ACL in posix_acl_equiv_mode
2014-06-07 10:28:16 -07:00
proc_namespace.c
fs/proc_namespace.c: simplify testing nsp and nsp->mnt_ns
2014-01-23 16:37:02 -08:00
read_write.c
vfs: atomic f_pos access in llseek()
2014-03-23 00:03:12 -04:00
readdir.c
…
select.c
…
seq_file.c
…
signalfd.c
…
splice.c
fuse: fix pipe_buf_operations
2014-01-22 19:36:57 +01:00
stack.c
…
stat.c
…
statfs.c
…
super.c
fs/superblock: avoid locking counting inodes and dentries before reclaiming them
2014-11-21 09:23:07 -08:00
sync.c
Revert "writeback: do not sync data dirtied after sync start"
2014-02-22 02:02:28 +01:00
timerfd.c
…
utimes.c
…
xattr.c
…