Peter Oberparleiter 0e501fd0f3 s390/cio: fix out-of-bounds access on cio_ignore free ... [ Upstream commit 1b60741127 ] The channel-subsystem-driver scans for newly available devices whenever device-IDs are removed from the cio_ignore list using a command such as: echo free >/proc/cio_ignore Since an I/O device scan might interfer with running I/Os, commit 172da89ed0 ("s390/cio: avoid excessive path-verification requests") introduced an optimization to exclude online devices from the scan. The newly added check for online devices incorrectly assumes that an I/O-subchannel's drvdata points to a struct io_subchannel_private. For devices that are bound to a non-default I/O subchannel driver, such as the vfio_ccw driver, this results in an out-of-bounds read access during each scan. Fix this by changing the scan logic to rely on a driver-independent online indication. For this we can use struct subchannel->config.ena, which is the driver's requested subchannel-enabled state. Since I/Os can only be started on enabled subchannels, this matches the intent of the original optimization of not scanning devices where I/O might be running. Fixes: 172da89ed0 ("s390/cio: avoid excessive path-verification requests") Fixes: 0c3812c347 ("s390/cio: derive cdev information only for IO-subchannels") Cc: <stable@vger.kernel.org> # v5.15 Reported-by: Alexander Egorenkov <egorenar@linux.ibm.com> Reviewed-by: Vineeth Vijayan <vneethv@linux.ibm.com> Signed-off-by: Peter Oberparleiter <oberpar@linux.ibm.com> Signed-off-by: Vasily Gorbik <gor@linux.ibm.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-11-10 18:15:33 +01:00
..
block	s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup	2022-09-28 11:11:54 +02:00
char	s390/zcore: fix race when reading from hardware system area	2022-08-17 14:24:10 +02:00
cio	s390/cio: fix out-of-bounds access on cio_ignore free	2022-11-10 18:15:33 +01:00
crypto	s390/ap: Fix hanging ioctl caused by orphaned replies	2021-11-18 19:17:17 +01:00
net	s390/lcs: fix variable dereferenced before check	2022-05-18 10:26:50 +02:00
scsi	scsi: zfcp: Fix missing auto port scan and thus missing target ports	2022-08-17 14:24:16 +02:00
virtio	…
Makefile	…