Konrad Rzeszutek Wilk 8f5a2856d9 xen/blkback: Check device permissions before allowing OP_DISCARD ...

commit 604c499cbb upstream.

We need to make sure that the device is not RO or that
the request is not past the number of sectors we want to
issue the DISCARD operation for.

This fixes CVE-2013-2140.

Acked-by: Jan Beulich <JBeulich@suse.com>
Acked-by: Ian Campbell <Ian.Campbell@citrix.com>
[v1: Made it pr_warn instead of pr_debug]
Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-08-04 16:25:54 +08:00

..

aoe

aoe: reserve enough headroom on skbs

2013-04-05 10:04:40 -07:00

drbd

drbd: fix for deadlock when using automatic split-brain-recovery

2013-05-19 10:54:48 -07:00

mtip32xx

mtip32xx: release the semaphore on an error path

2012-05-11 16:42:14 +02:00

paride

…

xen-blkback

xen/blkback: Check device permissions before allowing OP_DISCARD

2013-08-04 16:25:54 +08:00

amiflop.c

…

ataflop.c

…

brd.c

drivers/block/brd.c: fix brd_lookup_page() race

2013-06-07 12:49:26 -07:00

cciss_cmd.h

…

cciss_scsi.c

cciss: fix handling of protocol error

2012-10-02 10:29:50 -07:00

cciss_scsi.h

…

cciss.c

cciss: fix broken mutex usage in ioctl

2013-06-20 11:58:45 -07:00

cciss.h

…

cpqarray.c

…

cpqarray.h

…

cryptoloop.c

…

DAC960.c

dac960: Remove unused variables from DAC960_CreateProcEntries()

2012-05-11 16:42:14 +02:00

DAC960.h

…

floppy.c

floppy: do put_disk on current dr if blk_init_queue fails

2012-11-05 09:50:41 +01:00

hd.c

…

ida_cmd.h

…

ida_ioctl.h

…

Kconfig

…

loop.c

loop: prevent bdev freeing while device in use

2013-04-05 10:04:35 -07:00

Makefile

…

mg_disk.c

…

nbd.c

block: do not pass disk names as format strings

2013-07-13 11:03:41 -07:00

nvme.c

NVMe: Fix uninitialized iod compiler warning

2012-12-03 11:46:36 -08:00

osdblk.c

…

pktcdvd.c

…

ps3disk.c

…

ps3vram.c

…

rbd_types.h

…

rbd.c

rbd: do not allow remove of mounted-on image

2013-01-17 08:51:21 -08:00

smart1,2.h

…

sunvdc.c

sunvdc: Fix off-by-one in generic_request().

2013-02-28 06:59:02 -08:00

swim3.c

…

swim_asm.S

…

swim.c

…

sx8.c

…

ub.c

…

umem.c

umem: fix up unplugging

2012-07-16 09:04:08 -07:00

umem.h

…

virtio_blk.c

Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost

2012-04-16 18:34:12 -07:00

xd.c

…

xd.h

…

xen-blkfront.c

Merge branch 'for-3.4/drivers' of git://git.kernel.dk/linux-block

2012-04-13 18:45:13 -07:00

xsysace.c

…

z2ram.c

…