anolis-cloud-kernel/kernel/events
Oleg Nesterov 20f9206f02 uprobes: fix kernel info leak via "[uprobes]" vma
ANBZ: #12666

commit f561b48d633ac2e7d0d667020fc634a96ade33a0 stable.

commit 34820304cc upstream.

xol_add_vma() maps the uninitialized page allocated by __create_xol_area()
into userspace. On some architectures (x86) this memory is readable even
without VM_READ, VM_EXEC results in the same pgprot_t as VM_EXEC|VM_READ,
although this doesn't really matter, debugger can read this memory anyway.

Link: https://lore.kernel.org/all/20240929162047.GA12611@redhat.com/

Reported-by: Will Deacon <will@kernel.org>
Fixes: d4b3b6384f ("uprobes/core: Allocate XOL slots for uprobes use")
Cc: stable@vger.kernel.org
Acked-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

[Fixes Conflicts]
Fix conflicts caused by the manually construction of xol_mapping

Fixes: CVE-2024-49975
Signed-off-by: Xiao Long <xiaolong@openanolis.org>
Signed-off-by: Yuanhe Shu <xiangzao@linux.alibaba.com>
Reviewed-by: Tianchen Ding <dtcccc@linux.alibaba.com>
Reviewed-by: Shuai Xue <xueshuai@linux.alibaba.com>
Link: https://gitee.com/anolis/cloud-kernel/pulls/4546
2025-02-07 16:31:44 +08:00
..
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
callchain.c uaccess: add force_uaccess_{begin,end} helpers 2020-08-12 10:57:59 -07:00
core.c perf: Allow a PMU to have a parent 2024-12-03 05:41:21 +00:00
hw_breakpoint.c powerpc/watchpoint: Don't allow concurrent perf and ptrace events 2020-05-19 00:14:45 +10:00
internal.h perf: Fix perf_aux_size() for greater-than 32-bit size 2024-09-05 17:22:31 +08:00
ring_buffer.c perf: Fix default aux_watermark calculation 2024-09-05 17:22:31 +08:00
uprobes.c uprobes: fix kernel info leak via "[uprobes]" vma 2025-02-07 16:31:44 +08:00