Michael Kelley 82f9e213b1 Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted ... [ Upstream commit 30d18df6567be09c1433e81993e35e3da573ac48 ] In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. The VMBus ring buffer code could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the struct vmbus_gpadl for the ring buffers to decide whether to free the memory. Signed-off-by: Michael Kelley <mhklinux@outlook.com> Reviewed-by: Kuppuswamy Sathyanarayanan <sathyanarayanan.kuppuswamy@linux.intel.com> Acked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com> Link: https://lore.kernel.org/r/20240311161558.1310-6-mhklinux@outlook.com Signed-off-by: Wei Liu <wei.liu@kernel.org> Message-ID: <20240311161558.1310-6-mhklinux@outlook.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-05-17 12:02:17 +02:00
..
accel	accel/ivpu: Fix deadlock in context_xa	2024-04-17 11:19:34 +02:00
accessibility	speakup: Avoid crash on very long word	2024-04-27 17:11:40 +02:00
acpi	ACPI: CPPC: Fix access width used for PCC registers	2024-05-02 16:32:46 +02:00
amba	…
android	binder: check offset alignment in binder_get_object()	2024-04-27 17:11:38 +02:00
ata	ata: sata_gemini: Check clk_enable() result	2024-05-17 12:02:13 +02:00
atm	atm: idt77252: fix a memleak in open_card_ubr0	2024-02-16 19:10:49 +01:00
auxdisplay	…
base	regmap: Add regmap_read_bypassed()	2024-05-17 12:01:59 +02:00
bcma	…
block	aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts	2024-03-26 18:19:19 -04:00
bluetooth	Bluetooth: qca: add support for QCA2066	2024-05-17 12:01:56 +02:00
bus	bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state	2024-04-13 13:07:38 +02:00
cache	cache: ax45mp_cache: Align end size to cache boundary in ax45mp_dma_cache_wback()	2024-03-01 13:35:08 +01:00
cdrom	…
cdx	…
char	random: handle creditable entropy from atomic process context	2024-04-27 17:11:30 +02:00
clk	clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change	2024-05-17 12:02:08 +02:00
clocksource	clocksource/drivers/arm_global_timer: Fix maximum prescaler value	2024-04-03 15:28:50 +02:00
comedi	comedi: vmk80xx: fix incomplete endpoint checking	2024-04-27 17:11:39 +02:00
connector	connector/cn_proc: revert "connector: Fix proc_event_num_listeners count not cleared"	2024-02-23 09:25:01 +01:00
counter	…
cpufreq	cpufreq: Don't unregister cpufreq cooling on CPU hotplug	2024-04-13 13:07:32 +02:00
cpuidle	cpuidle: Avoid potential overflow in integer multiplication	2024-04-13 13:07:29 +02:00
crypto	crypto: sun8i-ce - Fix use after free in unprepare	2024-04-03 15:28:40 +02:00
cxl	cxl/core: Fix potential payload size confusion in cxl_mem_get_poison()	2024-05-02 16:32:35 +02:00
dax	…
dca	…
devfreq	PM / devfreq: Synchronize devfreq_monitor_[start/stop]	2024-02-05 20:14:15 +00:00
dio	…
dma	dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"	2024-05-17 12:01:55 +02:00
dma-buf	dma-buf: Fix NULL pointer dereference in sanitycheck()	2024-04-10 16:35:40 +02:00
edac	EDAC/thunderx: Fix possible out-of-bounds string access	2024-01-25 15:35:12 -08:00
eisa	…
extcon	extcon: fix possible name leak in extcon_dev_register()	2024-02-05 20:14:31 +00:00
firewire	firewire: ohci: mask bus reset interrupts between ISR and bottom half	2024-05-17 12:02:13 +02:00
firmware	firmware: arm_scmi: Make raw debugfs entries non-seekable	2024-04-17 11:19:27 +02:00
fpga	…
fsi	…
gnss	…
gpio	gpio: tegra186: Fix tegra186_gpio_is_accessible() check	2024-05-02 16:32:37 +02:00
gpu	amd/amdkfd: sync all devices to wait all processes being evicted	2024-05-17 12:02:16 +02:00
greybus	…
hid	HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up	2024-05-02 16:32:44 +02:00
hsi	…
hte	…
hv	Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted	2024-05-17 12:02:17 +02:00
hwmon	hwmon: (amc6821) add of_match table	2024-04-03 15:28:28 +02:00
hwspinlock	…
hwtracing	hwtracing: hisi_ptt: Move type check to the beginning of hisi_ptt_pmu_event_init()	2024-03-26 18:20:06 -04:00
i2c	i2c: smbus: fix NULL function pointer dereference	2024-05-02 16:32:49 +02:00
i3c	i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling	2024-03-26 18:20:01 -04:00
idle	x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram	2024-01-25 15:35:12 -08:00
iio	iio: imu: inv_mpu6050: fix FIFO parsing when empty	2024-04-03 15:28:45 +02:00
infiniband	RDMA/mlx5: Fix port number for counter query in multi-port configuration	2024-04-27 17:11:34 +02:00
input	Input: xpad - add support for Snakebyte GAMEPADs	2024-04-13 13:07:37 +02:00
interconnect	interconnect: Don't access req_list while it's being manipulated	2024-04-27 17:11:37 +02:00
iommu	iommu/vt-d: Allocate local memory for page request queue	2024-04-17 11:19:33 +02:00
ipack	…
irqchip	irqchip/gic-v3-its: Prevent double free on error	2024-05-02 16:32:45 +02:00
isdn	…
leds	leds: trigger: netdev: Fix kernel panic on interface rename trig notify	2024-04-03 15:28:27 +02:00
macintosh	…
mailbox	mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt	2024-02-05 20:14:31 +00:00
mcb	mcb: fix error handling for different scenarios when parsing	2023-11-28 17:20:05 +00:00
md	raid1: fix use-after-free for original bio in raid1_write_request()	2024-04-17 11:19:25 +02:00
media	media: videobuf2: request more buffers for vb2_read	2024-04-27 17:11:30 +02:00
memory	memory: tegra: Correct DLA client names	2024-03-26 18:19:32 -04:00
memstick	…
message	…
mfd	mfd: cs42l43: Fix wrong GPIO_FN_SEL and SPI_CLK_CONFIG1 defaults	2024-03-26 18:19:55 -04:00
misc	eeprom: at24: fix memory corruption race condition	2024-05-17 12:01:56 +02:00
mmc	mmc: sdhci-msm: pervent access to suspended controller	2024-05-02 16:32:43 +02:00
most	…
mtd	mtd: limit OTP NVMEM cell parse to non-NAND devices	2024-05-17 12:01:55 +02:00
mux	…
net	hv_netvsc: Don't free decrypted memory	2024-05-17 12:02:17 +02:00
nfc	NFC: trf7970a: disable all regulators on removal	2024-05-02 16:32:36 +02:00
ntb	NTB: fix possible name leak in ntb_register_device()	2024-03-26 18:19:48 -04:00
nubus	…
nvdimm	…
nvme	nvme: fix warn output about shared namespaces without CONFIG_NVME_MULTIPATH	2024-05-17 12:01:59 +02:00
nvmem	nvmem: add explicit config option to read old syntax fixed OF cells	2024-05-17 12:01:55 +02:00
of	of: module: prevent NULL pointer dereference in vsnprintf()	2024-04-10 16:36:06 +02:00
opp	OPP: debugfs: Fix warning around icc_get_name()	2024-03-26 18:19:40 -04:00
parisc	parisc/power: Fix power soft-off button emulation on qemu	2024-01-31 16:18:52 -08:00
parport	parport: parport_serial: Add Brainboxes device IDs and geometry	2024-01-20 11:51:48 +01:00
pci	PCI/ASPM: Fix deadlock when enabling ASPM	2024-04-27 17:11:44 +02:00
pcmcia	…
peci	…
perf	drivers/perf: hisi: Enable HiSilicon Erratum 162700402 quirk for HIP09	2024-04-13 13:07:36 +02:00
phy	phy: qcom: qmp-combo: fix VCO div offset on v5_5nm and v6	2024-05-02 16:32:49 +02:00
pinctrl	pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()	2024-05-17 12:01:58 +02:00
platform	platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes	2024-04-27 17:11:37 +02:00
pmdomain	pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain	2024-04-13 13:07:30 +02:00
pnp	PNP: ACPI: fix fortify warning	2024-02-05 20:14:15 +00:00
power	power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator	2024-05-17 12:01:58 +02:00
powercap	powercap: intel_rapl_tpmi: Fix System Domain probing	2024-04-03 15:28:19 +02:00
pps	…
ps3	…
ptp	…
pwm	pwm: img: fix pwm clock lookup	2024-04-03 15:28:52 +02:00
rapidio	…
ras	…
regulator	regulator: tps65132: Add of_match table	2024-05-17 12:02:12 +02:00
remoteproc	remoteproc: virtio: Fix wdg cannot recovery remote processor	2024-04-03 15:28:16 +02:00
reset	reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning	2024-01-20 11:51:44 +01:00
rpmsg	rpmsg: virtio: Free driver_override when rpmsg_remove()	2024-01-31 16:18:50 -08:00
rtc	nvmem: add explicit config option to read old syntax fixed OF cells	2024-05-17 12:01:55 +02:00
s390	s390/qeth: Fix kernel panic after setting hsuid	2024-05-17 12:02:06 +02:00
sbus	…
scsi	scsi: hisi_sas: Handle the NCQ error returned by D2H frame	2024-05-17 12:02:15 +02:00
sh	…
siox	…
slimbus	slimbus: core: Remove usage of the deprecated ida_simple_xx() API	2024-04-03 15:28:28 +02:00
soc	soc: fsl: qbman: Use raw spinlock for cgr_lock	2024-04-03 15:28:32 +02:00
soundwire	soundwire: amd: fix for wake interrupt handling for clockstop mode	2024-05-02 16:32:47 +02:00
spi	spi: fix null pointer dereference within spi_sync	2024-05-17 12:02:05 +02:00
spmi	spmi: mediatek: Fix UAF on device remove	2024-02-05 20:14:32 +00:00
ssb	…
staging	staging: vc04_services: fix information leak in create_component()	2024-04-03 15:28:59 +02:00
target	scsi: target: Fix SELinux error when systemd-modules loads the target module	2024-05-17 12:02:15 +02:00
tc	…
tee	tee: optee: Fix kernel panic caused by incorrect error handling	2024-04-03 15:28:44 +02:00
thermal	thermal/of: Assume polling-delay(-passive) 0 when absent	2024-04-13 13:07:39 +02:00
thunderbolt	thunderbolt: Reset only non-USB4 host routers in resume	2024-04-27 17:11:44 +02:00
tty	serial: core: Fix missing shutdown and startup for serial base port	2024-04-27 17:11:39 +02:00
ufs	scsi: ufs: core: Fix MCQ mode dev command timeout	2024-05-17 12:02:12 +02:00
uio	uio_hv_generic: Don't free decrypted memory	2024-05-17 12:02:17 +02:00
usb	usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error	2024-04-27 17:11:40 +02:00
vdpa	vdpa/mlx5: Allow CVQ size changes	2024-03-26 18:20:10 -04:00
vfio	vfio/pds: Make sure migration file isn't accessed after reset	2024-04-03 15:28:59 +02:00
vhost	vhost: Add smp_rmb() in vhost_enable_notify()	2024-04-17 11:19:35 +02:00
video	fbdev: fix incorrect address computation in deferred IO	2024-05-02 16:32:46 +02:00
virt	…
virtio	virtio: reenable config if freezing device failed	2024-04-03 15:28:36 +02:00
vlynq	…
w1	nvmem: add explicit config option to read old syntax fixed OF cells	2024-05-17 12:01:55 +02:00
watchdog	watchdog: stm32_iwdg: initialize default timeout	2024-03-26 18:20:02 -04:00
xen	x86/xen: attempt to inflate the memory balloon on PVH	2024-04-13 13:07:39 +02:00
zorro	…
Kconfig	…
Makefile	…