Ming Lei 6414ab5c9c ublk: don't allow user copy for unprivileged device ...

commit 42aafd8b48adac1c3b20fe5892b1b91b80c1a1e6 upstream.

UBLK_F_USER_COPY requires userspace to call write() on ublk char
device for filling request buffer, and unprivileged device can't
be trusted.

So don't allow user copy for unprivileged device.

Cc: stable@vger.kernel.org
Fixes: 1172d5b8be ("ublk: support user copy")
Signed-off-by: Ming Lei <ming.lei@redhat.com>
Link: https://lore.kernel.org/r/20241016134847.2911721-1-ming.lei@redhat.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-10-22 15:46:27 +02:00

..

aoe

aoe: fix the potential use-after-free problem in more places

2024-10-10 11:57:53 +02:00

drbd

drbd: Add NULL check for net_conf to prevent dereference in state validation

2024-10-04 16:29:52 +02:00

mtip32xx

block: replace fmode_t with a block-specific type for block open flags

2023-06-12 08:04:05 -06:00

null_blk

null_blk: Fix return value of nullb_device_power_store()

2024-10-10 11:58:09 +02:00

rnbd

block/rnbd-srv: Check for unlikely string overflow

2024-02-05 20:14:22 +00:00

xen-blkback

block: replace fmode_t with a block-specific type for block open flags

2023-06-12 08:04:05 -06:00

zram

zram: don't free statically defined names

2024-10-17 15:24:14 +02:00

amiflop.c

amiflop: don't call fsync_bdev in FDFMTBEG

2023-08-21 14:35:31 +02:00

ataflop.c

block: replace fmode_t with a block-specific type for block open flags

2023-06-12 08:04:05 -06:00

brd.c

brd: use cond_resched instead of cond_resched_rcu

2023-06-14 11:13:07 -06:00

floppy.c

floppy: call disk_force_media_change when changing the format

2023-08-21 14:35:31 +02:00

Kconfig

block: ublk: switch to ioctl command encoding

2023-04-18 20:13:30 -06:00

loop.c

loop: don't set QUEUE_FLAG_NOMERGES

2024-10-10 11:57:18 +02:00

Makefile

Revert "pktcdvd: remove driver."

2023-01-04 14:44:13 -07:00

n64cart.c

block: remove blk_cleanup_disk

2022-06-28 06:33:15 -06:00

nbd.c

nbd: fix race between timeout and normal completion

2024-10-04 16:28:59 +02:00

pktcdvd.c

block: replace fmode_t with a block-specific type for block open flags

2023-06-12 08:04:05 -06:00

ps3disk.c

block: remove blk_cleanup_disk

2022-06-28 06:33:15 -06:00

ps3vram.c

ps3vram: remove bio splitting

2023-01-29 15:18:35 -07:00

rbd_types.h

…

rbd.c

rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings

2024-08-03 08:54:32 +02:00

sunvdc.c

block: replace fmode_t with a block-specific type for block open flags

2023-06-12 08:04:05 -06:00

swim3.c

swim3: mark swim3_init() static

2023-08-10 08:32:59 -06:00

swim_asm.S

…

swim.c

swim: fix a missing FMODE_ -> BLK_OPEN_ conversion in floppy_open

2023-06-20 07:16:04 -06:00

ublk_drv.c

ublk: don't allow user copy for unprivileged device

2024-10-22 15:46:27 +02:00

virtio_blk.c

virtio-blk: Ensure no requests in virtqueues before deleting vqs.

2024-03-01 13:34:56 +01:00

xen-blkfront.c

Merge tag 'for-6.5/block-2023-06-23' of git://git.kernel.dk/linux

2023-06-26 12:47:20 -07:00

z2ram.c

block: replace fmode_t with a block-specific type for block open flags

2023-06-12 08:04:05 -06:00