diff options
| author |   Oliver Hartkopp <socketcan@hartkopp.net> | 2025-05-19 14:50:27 +0200 |
|---|---|---|
| committer |   Marc Kleine-Budde <mkl@pengutronix.de> | 2025-05-19 16:58:19 +0200 |
| commit | dac5e6249159ac255dad9781793dbe5908ac9ddb (patch) | |
| tree | 6fb3fc8ab8b768b22493a8c760cebc732cc812ed /net/unix/af_unix.c | |
| parent | can: bcm: add locking for bcm_op runtime updates (diff) | |
| download | wireguard-linux-dac5e6249159ac255dad9781793dbe5908ac9ddb.tar.xz wireguard-linux-dac5e6249159ac255dad9781793dbe5908ac9ddb.zip | |
can: bcm: add missing rcu read protection for procfs content
When the procfs content is generated for a bcm_op which is in the process
to be removed the procfs output might show unreliable data (UAF).
As the removal of bcm_op's is already implemented with rcu handling this
patch adds the missing rcu_read_lock() and makes sure the list entries
are properly removed under rcu protection.
Fixes: f1b4e32aca08 ("can: bcm: use call_rcu() instead of costly synchronize_rcu()")
Reported-by: Anderson Nascimento <anderson@allelesecurity.com>
Suggested-by: Anderson Nascimento <anderson@allelesecurity.com>
Tested-by: Anderson Nascimento <anderson@allelesecurity.com>
Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net>
Link: https://patch.msgid.link/20250519125027.11900-2-socketcan@hartkopp.net
Cc: stable@vger.kernel.org # >= 5.4
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions