D. Wythe e40b801b36 net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() ... There is a certain chance to trigger the following panic: PID: 5900 TASK: ffff88c1c8af4100 CPU: 1 COMMAND: "kworker/1:48" #0 [ffff9456c1cc79a0] machine_kexec at ffffffff870665b7 #1 [ffff9456c1cc79f0] __crash_kexec at ffffffff871b4c7a #2 [ffff9456c1cc7ab0] crash_kexec at ffffffff871b5b60 #3 [ffff9456c1cc7ac0] oops_end at ffffffff87026ce7 #4 [ffff9456c1cc7ae0] page_fault_oops at ffffffff87075715 #5 [ffff9456c1cc7b58] exc_page_fault at ffffffff87ad0654 #6 [ffff9456c1cc7b80] asm_exc_page_fault at ffffffff87c00b62 [exception RIP: ib_alloc_mr+19] RIP: ffffffffc0c9cce3 RSP: ffff9456c1cc7c38 RFLAGS: 00010202 RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000004 RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff88c1ea281d00 R8: 000000020a34ffff R9: ffff88c1350bbb20 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000010 R14: ffff88c1ab040a50 R15: ffff88c1ea281d00 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #7 [ffff9456c1cc7c60] smc_ib_get_memory_region at ffffffffc0aff6df [smc] #8 [ffff9456c1cc7c88] smcr_buf_map_link at ffffffffc0b0278c [smc] #9 [ffff9456c1cc7ce0] __smc_buf_create at ffffffffc0b03586 [smc] The reason here is that when the server tries to create a second link, smc_llc_srv_add_link() has no protection and may add a new link to link group. This breaks the security environment protected by llc_conf_mutex. Fixes: 2d2209f201 ("net/smc: first part of add link processing as SMC server") Signed-off-by: D. Wythe <alibuda@linux.alibaba.com> Reviewed-by: Larysa Zaremba <larysa.zaremba@intel.com> Reviewed-by: Wenjia Zhang <wenjia@linux.ibm.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2023-02-20 08:07:01 +00:00
..
af_smc.c	net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()	2023-02-20 08:07:01 +00:00
Kconfig
Makefile	net/smc: fix compile warning for smc_sysctl	2022-03-07 11:59:17 +00:00
smc.h	net/smc: Only save the original clcsock callback functions	2022-04-25 11:03:48 -07:00
smc_cdc.c	net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *"	2022-05-28 12:36:26 +01:00
smc_cdc.h	net/smc: fix kernel panic caused by race of smc_sock	2021-12-28 12:42:45 +00:00
smc_clc.c	use less confusing names for iov_iter direction initializers	2022-11-25 13:01:55 -05:00
smc_clc.h	net/smc: Allow virtually contiguous sndbufs or RMBs for SMC-R	2022-07-18 11:19:17 +01:00
smc_close.c	net/smc: Fix slab-out-of-bounds issue in fallback	2022-04-25 11:03:48 -07:00
smc_close.h
smc_core.c	net/smc: Fix an error code in smc_lgr_create()	2022-10-15 11:12:12 +01:00
smc_core.h	net/smc: Fix possible access to freed memory in link clear	2022-09-07 16:00:48 +01:00
smc_diag.c	net/smc: Enable module load on netlink usage	2022-07-27 13:24:42 +01:00
smc_ib.c	net/smc: Allow virtually contiguous sndbufs or RMBs for SMC-R	2022-07-18 11:19:17 +01:00
smc_ib.h	net/smc: optimize for smc_sndbuf_sync_sg_for_device and smc_rmb_sync_sg_for_cpu	2022-07-18 11:19:17 +01:00
smc_ism.c	net/smc: Pass on DMBE bit mask in IRQ handler	2022-07-27 13:24:42 +01:00
smc_ism.h	net/smc: Eliminate struct smc_ism_position	2022-07-27 13:24:42 +01:00
smc_llc.c	net/smc: Introduce a specific sysctl for TEST_LINK time	2022-09-22 12:58:21 +02:00
smc_llc.h	net/smc: Introduce a specific sysctl for TEST_LINK time	2022-09-22 12:58:21 +02:00
smc_netlink.c	genetlink: start to validate reserved header bytes	2022-08-29 12:47:15 +01:00
smc_netlink.h	net/smc: add support for user defined EIDs	2021-09-14 12:49:10 +01:00
smc_netns.h	net/smc: introduce list of pnetids for Ethernet devices	2020-09-28 15:19:03 -07:00
smc_pnet.c	genetlink: start to validate reserved header bytes	2022-08-29 12:47:15 +01:00
smc_pnet.h	net/smc: Use a mutex for locking "struct smc_pnettable"	2022-02-24 09:09:33 -08:00
smc_rx.c	net/smc: Allow virtually contiguous sndbufs or RMBs for SMC-R	2022-07-18 11:19:17 +01:00
smc_rx.h
smc_stats.c	net/smc: Fix ENODATA tests in smc_nl_get_fback_stats()	2021-06-21 12:16:58 -07:00
smc_stats.h	net/smc: Make SMC statistics network namespace aware	2021-06-16 12:54:02 -07:00
smc_sysctl.c	net/smc: Unbind r/w buffer size from clcsock and make them tunable	2022-09-22 12:58:21 +02:00
smc_sysctl.h	net/smc: fix -Wmissing-prototypes warning when CONFIG_SYSCTL not set	2022-03-09 20:02:35 -08:00
smc_tracepoint.c	net/smc: Introduce tracepoint for smcr link down	2021-11-01 13:39:14 +00:00
smc_tracepoint.h	net/smc: Add net namespace for tracepoints	2022-01-02 12:07:39 +00:00
smc_tx.c	use less confusing names for iov_iter direction initializers	2022-11-25 13:01:55 -05:00
smc_tx.h	net/smc: Cork when sendpage with MSG_SENDPAGE_NOTLAST flag	2022-01-31 15:08:20 +00:00
smc_wr.c	net/smc: Fix possible access to freed memory in link clear	2022-09-07 16:00:48 +01:00
smc_wr.h	net/smc: Fix possible access to freed memory in link clear	2022-09-07 16:00:48 +01:00