linux-kernel - [PATCH 0/2] Revert "block: add single bio async direct IO helper" to avoid UAF

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1638892302-14475-1-git-send-email-george.kennedy@oracle.com>
Date:   Tue,  7 Dec 2021 10:51:40 -0500
From:   George Kennedy <george.kennedy@...cle.com>
To:     gregkh@...uxfoundation.org, axboe@...nel.dk, asml.silence@...il.com
Cc:     george.kennedy@...cle.com, linux-block@...r.kernel.org,
        linux-kernel@...r.kernel.org
Subject: [PATCH 0/2] Revert "block: add single bio async direct IO helper" to avoid UAF

git bisect shows that commit 54a88eb838d3
("block: add single bio async direct IO helper")
causes the following UAF: KASAN: use-after-free Write in io_submit_one

Tried to root-cause the issue, but need the patch submitter's help in
coming up with a fix.

Needed to revert commit 1bb6b8102945
("block: avoid extra iter advance with async iocb")
in order to be able to revert 54a88eb838d37af930c9f19e1930a4fba6789cb5.

George Kennedy (2):
  Revert "block: avoid extra iter advance with async iocb"
  Revert "block: add single bio async direct IO helper"

 block/bio.c         |  2 +-
 block/fops.c        | 96 ++---------------------------------------------------
 include/linux/bio.h |  1 -
 3 files changed, 4 insertions(+), 95 deletions(-)

-- 
1.8.3.1