Jann Horn b692c405a1 sys: don't hold uts_sem while accessing userspace memory ... commit 42a0cc3478 upstream. Holding uts_sem as a writer while accessing userspace memory allows a namespace admin to stall all processes that attempt to take uts_sem. Instead, move data through stack buffers and don't access userspace memory while uts_sem is held. Cc: stable@vger.kernel.org Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Eric W. Biederman <ebiederm@xmission.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-09-09 19:56:00 +02:00
..
alpha	sys: don't hold uts_sem while accessing userspace memory	2018-09-09 19:56:00 +02:00
arc	arc: fix type warnings in arc/mm/cache.c	2018-09-05 09:26:31 +02:00
arm	ARM: tegra: Fix Tegra30 Cardhu PCA954x reset	2018-09-09 19:55:59 +02:00
arm64	arm64: dts: rockchip: corrected uart1 clock-names for rk3328	2018-09-05 09:26:35 +02:00
blackfin
c6x
cris
frv
h8300
hexagon
ia64
m32r
m68k	m68k: fix "bad page state" oops on ColdFire boot	2018-08-24 13:09:11 +02:00
metag
microblaze
mips	MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7	2018-09-05 09:26:41 +02:00
mn10300
nios2
openrisc
parisc	parisc: Remove unnecessary barriers from spinlock.h	2018-08-24 13:09:22 +02:00
powerpc	KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages	2018-09-09 19:55:58 +02:00
s390	s390/pci: fix out of bounds access during irq setup	2018-09-05 09:26:40 +02:00
score
sh
sparc	sys: don't hold uts_sem while accessing userspace memory	2018-09-09 19:56:00 +02:00
tile
um
unicore32
x86	KVM: VMX: fixes for vmentry_l1d_flush module parameter	2018-09-09 19:55:58 +02:00
xtensa	xtensa: increase ranges in ___invalidate_{i,d}cache_all	2018-09-09 19:55:59 +02:00
.gitignore
Kconfig	mm/tlb, x86/mm: Support invalidating TLB caches for RCU_TABLE_FREE	2018-09-05 09:26:37 +02:00