Dear Friend,
I came across your e-mail contact prior a private search while in need
of your assistance. My name is Aisha Gaddafi a single
Mother and a Widow with three Children. I am the only biological
Daughter of late Libyan President (Late Colonel Muammar
Gaddafi).
I have investment funds worth Twenty Seven Million Five Hundred
Thousand United State Dollar ($27.500.000.00 ) and i need a
trusted investment Manager/Partner because of my current refugee
status, however, I am interested in you for investment
project assistance in your country, may be from there, we can build
business relationship in the nearest future.
I am willing to negotiate investment/business profit sharing ratio
with you base on the future investment earning profits.
If you are willing to handle this project on my behalf kindly reply
Best Regards
Mrs Aisha Gaddafi
udf_expand_file_adinicb() calls directly ->writepage to write data
expanded into a page. This however misses to setup inode for writeback
properly and so we can crash on inode->i_wb dereference when submitting
page for IO like:
BUG: kernel NULL pointer dereference, address: 0000000000000158
#PF: supervisor read access in kernel mode
...
<TASK>
__folio_start_writeback+0x2ac/0x350
__block_write_full_page+0x37d/0x490
udf_expand_file_adinicb+0x255/0x400 [udf]
udf_file_write_iter+0xbe/0x1b0 [udf]
new_sync_write+0x125/0x1c0
vfs_write+0x28e/0x400
Fix the problem by marking the page dirty and going through the standard
writeback path to write the page. Strictly speaking we would not even
have to write the page but we want to catch e.g. ENOSPC errors early.
Reported-by: butt3rflyh4ck <butterflyhuangxx(a)gmail.com>
CC: stable(a)vger.kernel.org
Fixes: 52ebea749aae ("writeback: make backing_dev_info host cgroup-specific bdi_writebacks")
Signed-off-by: Jan Kara <jack(a)suse.cz>
---
fs/udf/inode.c | 8 +++-----
1 file changed, 3 insertions(+), 5 deletions(-)
diff --git a/fs/udf/inode.c b/fs/udf/inode.c
index 1d6b7a50736b..d6aa506b6b58 100644
--- a/fs/udf/inode.c
+++ b/fs/udf/inode.c
@@ -258,10 +258,6 @@ int udf_expand_file_adinicb(struct inode *inode)
char *kaddr;
struct udf_inode_info *iinfo = UDF_I(inode);
int err;
- struct writeback_control udf_wbc = {
- .sync_mode = WB_SYNC_NONE,
- .nr_to_write = 1,
- };
WARN_ON_ONCE(!inode_is_locked(inode));
if (!iinfo->i_lenAlloc) {
@@ -305,8 +301,10 @@ int udf_expand_file_adinicb(struct inode *inode)
iinfo->i_alloc_type = ICBTAG_FLAG_AD_LONG;
/* from now on we have normal address_space methods */
inode->i_data.a_ops = &udf_aops;
+ set_page_dirty(page);
+ unlock_page(page);
up_write(&iinfo->i_data_sem);
- err = inode->i_data.a_ops->writepage(page, &udf_wbc);
+ err = filemap_fdatawrite(inode->i_mapping);
if (err) {
/* Restore everything back so that we don't lose data... */
lock_page(page);
--
2.31.1
Syzbot found a GPF in reweight_entity. This has been bisected to commit
c85c6fadbef0 ("kernel/sched: Fix sched_fork() access an invalid sched_task_group")
Looks like after this change there is a time window, when
task_struct->se.cfs_rq can be NULL. This can be exploited to trigger
null-ptr-deref by calling setpriority on that task.
Cc: Ingo Molnar <mingo(a)redhat.com>
Cc: Peter Zijlstra <peterz(a)infradead.org>
Cc: Juri Lelli <juri.lelli(a)redhat.com>
Cc: Vincent Guittot <vincent.guittot(a)linaro.org>
Cc: Dietmar Eggemann <dietmar.eggemann(a)arm.com>
Cc: Steven Rostedt <rostedt(a)goodmis.org>
Cc: Ben Segall <bsegall(a)google.com>
Cc: Mel Gorman <mgorman(a)suse.de>
Cc: Daniel Bristot de Oliveira <bristot(a)redhat.com>
Cc: Zhang Qiao <zhangqiao22(a)huawei.com>
Cc: stable(a)vger.kernel.org
Cc: linux-kernel(a)vger.kernel.org
Link: https://syzkaller.appspot.com/bug?id=9d9c27adc674e3a7932b22b61c79a02da82cbd…
Fixes: c85c6fadbef0 ("kernel/sched: Fix sched_fork() access an invalid sched_task_group")
Signed-off-by: Tadeusz Struk <tadeusz.struk(a)linaro.org>
---
kernel/sched/fair.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/kernel/sched/fair.c b/kernel/sched/fair.c
index 095b0aa378df..196f8cee3f9b 100644
--- a/kernel/sched/fair.c
+++ b/kernel/sched/fair.c
@@ -3042,6 +3042,9 @@ dequeue_load_avg(struct cfs_rq *cfs_rq, struct sched_entity *se) { }
static void reweight_entity(struct cfs_rq *cfs_rq, struct sched_entity *se,
unsigned long weight)
{
+ if (!cfs_rq)
+ return;
+
if (se->on_rq) {
/* commit outstanding execution time */
if (cfs_rq->curr == se)
--
2.34.1
This is the start of the stable review cycle for the 5.4.173 release.
There are 15 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 20 Jan 2022 16:04:42 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.173-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.4.173-rc1
Nick Desaulniers <ndesaulniers(a)google.com>
ARM: 9025/1: Kconfig: CPU_BIG_ENDIAN depends on !LD_IS_LLD
Arnd Bergmann <arnd(a)arndb.de>
mtd: fixup CFI on ixp4xx
Christian Lachner <gladiac(a)gmail.com>
ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows
Wei Wang <wei.w.wang(a)intel.com>
KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
Johan Hovold <johan(a)kernel.org>
firmware: qemu_fw_cfg: fix kobject leak in probe error path
Johan Hovold <johan(a)kernel.org>
firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
Johan Hovold <johan(a)kernel.org>
firmware: qemu_fw_cfg: fix sysfs information leak
Larry Finger <Larry.Finger(a)lwfinger.net>
rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
Johan Hovold <johan(a)kernel.org>
media: uvcvideo: fix division by zero at stream start
Eric Farman <farman(a)linux.ibm.com>
KVM: s390: Clarify SIGP orders versus STOP/RESTART
Sean Christopherson <seanjc(a)google.com>
perf: Protect perf_guest_cbs with RCU
Jamie Hill-Daniel <jamie(a)hill-daniel.co.uk>
vfs: fs_context: fix up param length parsing in legacy_parse_param
Christophe JAILLET <christophe.jaillet(a)wanadoo.fr>
orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
NeilBrown <neilb(a)suse.de>
devtmpfs regression fix: reconfigure on each mount
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test
-------------
Diffstat:
Makefile | 6 ++---
arch/arm/kernel/perf_callchain.c | 17 +++++++-----
arch/arm/mm/Kconfig | 1 +
arch/arm64/kernel/perf_callchain.c | 18 ++++++++-----
arch/csky/kernel/perf_callchain.c | 6 +++--
arch/nds32/kernel/perf_event_cpu.c | 17 +++++++-----
arch/riscv/kernel/perf_callchain.c | 7 +++--
arch/s390/kvm/interrupt.c | 7 +++++
arch/s390/kvm/kvm-s390.c | 9 +++++--
arch/s390/kvm/kvm-s390.h | 1 +
arch/s390/kvm/sigp.c | 28 ++++++++++++++++++++
arch/x86/events/core.c | 17 +++++++-----
arch/x86/events/intel/core.c | 9 ++++---
arch/x86/kvm/x86.c | 2 +-
drivers/base/devtmpfs.c | 8 ++++++
drivers/firmware/qemu_fw_cfg.c | 20 ++++++---------
drivers/media/usb/uvc/uvc_video.c | 4 +++
drivers/mtd/chips/Kconfig | 2 ++
drivers/mtd/maps/Kconfig | 2 +-
.../net/wireless/realtek/rtlwifi/rtl8192cu/hw.c | 1 +
fs/fs_context.c | 2 +-
fs/orangefs/orangefs-bufmap.c | 7 +++--
fs/super.c | 4 +--
include/linux/fs_context.h | 2 ++
include/linux/perf_event.h | 13 +++++++++-
kernel/events/core.c | 13 +++++++---
sound/pci/hda/patch_realtek.c | 30 +++++++++++++++++++++-
27 files changed, 191 insertions(+), 62 deletions(-)
This is the start of the stable review cycle for the 5.16.2 release.
There are 28 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 20 Jan 2022 16:04:42 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.16.2-rc1…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.16.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.16.2-rc1
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda/realtek: Re-order quirk entries for Lenovo
Baole Fang <fbl718(a)163.com>
ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
Sameer Pujar <spujar(a)nvidia.com>
ALSA: hda/tegra: Fix Tegra194 HDA reset failure
Bart Kroon <bart(a)tarmack.eu>
ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
Christian Lachner <gladiac(a)gmail.com>
ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows
Kai-Heng Feng <kai.heng.feng(a)canonical.com>
ALSA: hda/realtek: Use ALC285_FIXUP_HP_GPIO_LED on another HP laptop
Arie Geiger <arsgeiger(a)gmail.com>
ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
Dario Petrillo <dario.pk1(a)gmail.com>
perf annotate: Avoid TUI crash when navigating in the annotation of recursive functions
Johan Hovold <johan(a)kernel.org>
firmware: qemu_fw_cfg: fix kobject leak in probe error path
Johan Hovold <johan(a)kernel.org>
firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
Johan Hovold <johan(a)kernel.org>
firmware: qemu_fw_cfg: fix sysfs information leak
Larry Finger <Larry.Finger(a)lwfinger.net>
rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled
Johan Hovold <johan(a)kernel.org>
media: uvcvideo: fix division by zero at stream start
Javier Martinez Canillas <javierm(a)redhat.com>
video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
Dominique Martinet <asmadeus(a)codewreck.org>
9p: fix enodata when reading growing file
Christian Brauner <christian.brauner(a)ubuntu.com>
9p: only copy valid iattrs in 9P2000.L setattr implementation
Chuck Lever <chuck.lever(a)oracle.com>
NFSD: Fix zero-length NFSv3 WRITEs
Sibi Sankar <sibis(a)codeaurora.org>
remoteproc: qcom: pas: Add missing power-domain "mxc" for CDSP
Eric Farman <farman(a)linux.ibm.com>
KVM: s390: Clarify SIGP orders versus STOP/RESTART
Li RongQing <lirongqing(a)baidu.com>
KVM: x86: don't print when fail to read/write pv eoi memory
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest
Sean Christopherson <seanjc(a)google.com>
KVM: x86: Register perf callbacks after calling vendor's hardware_setup()
Sean Christopherson <seanjc(a)google.com>
perf: Protect perf_guest_cbs with RCU
Jamie Hill-Daniel <jamie(a)hill-daniel.co.uk>
vfs: fs_context: fix up param length parsing in legacy_parse_param
Stephen Boyd <swboyd(a)chromium.org>
remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided
Christophe JAILLET <christophe.jaillet(a)wanadoo.fr>
orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
Mario Limonciello <mario.limonciello(a)amd.com>
drm/amd/display: explicitly set is_dsc_supported to false before use
NeilBrown <neilb(a)suse.de>
devtmpfs regression fix: reconfigure on each mount
-------------
Diffstat:
Makefile | 4 +-
arch/arm/kernel/perf_callchain.c | 17 ++++---
arch/arm64/kernel/perf_callchain.c | 18 +++++---
arch/csky/kernel/perf_callchain.c | 6 ++-
arch/nds32/kernel/perf_event_cpu.c | 17 ++++---
arch/riscv/kernel/perf_callchain.c | 7 ++-
arch/s390/kvm/interrupt.c | 7 +++
arch/s390/kvm/kvm-s390.c | 9 +++-
arch/s390/kvm/kvm-s390.h | 1 +
arch/s390/kvm/sigp.c | 28 ++++++++++++
arch/x86/events/core.c | 17 ++++---
arch/x86/events/intel/core.c | 9 ++--
arch/x86/include/asm/kvm_host.h | 1 +
arch/x86/kvm/lapic.c | 18 +++-----
arch/x86/kvm/vmx/vmx.c | 1 +
arch/x86/kvm/x86.c | 12 +++--
drivers/base/devtmpfs.c | 7 +++
drivers/firmware/qemu_fw_cfg.c | 20 ++++-----
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 +
drivers/media/usb/uvc/uvc_video.c | 4 ++
.../net/wireless/realtek/rtlwifi/rtl8192cu/hw.c | 1 +
drivers/remoteproc/qcom_pil_info.c | 2 +-
drivers/remoteproc/qcom_q6v5_pas.c | 1 +
drivers/video/fbdev/vga16fb.c | 24 ++++++++++
fs/9p/vfs_addr.c | 5 +++
fs/9p/vfs_inode_dotl.c | 29 ++++++++----
fs/fs_context.c | 2 +-
fs/nfsd/nfs3proc.c | 6 +--
fs/nfsd/nfsproc.c | 5 ---
fs/orangefs/orangefs-bufmap.c | 7 ++-
fs/super.c | 4 +-
include/linux/fs_context.h | 2 +
include/linux/perf_event.h | 13 +++++-
kernel/events/core.c | 13 ++++--
sound/pci/hda/hda_tegra.c | 43 ++++++++++++++----
sound/pci/hda/patch_realtek.c | 52 ++++++++++++++++++++--
tools/perf/ui/browsers/annotate.c | 23 ++++++----
37 files changed, 321 insertions(+), 115 deletions(-)