Heiko Carstens 96e02d1586
exec: fix use-after-free bug in setup_new_exec() ...
Setting the task name is done within setup_new_exec() by accessing
bprm->filename. However this happens after flush_old_exec().
This may result in a use after free bug, flush_old_exec() may
"complete" vfork_done, which will wake up the parent which in turn
may free the passed in filename.
To fix this add a new tcomm field in struct linux_binprm which
contains the now early generated task name until it is used.
Fixes this bug on s390:
Unable to handle kernel pointer dereference at virtual kernel address 0000000039768000
Process kworker/u:3 (pid: 245, task: 000000003a3dc840, ksp: 0000000039453818)
Krnl PSW : 0704000180000000 0000000000282e94 (setup_new_exec+0xa0/0x374)
Call Trace:
([<0000000000282e2c>] setup_new_exec+0x38/0x374)
[<00000000002dd12e>] load_elf_binary+0x402/0x1bf4
[<0000000000280a42>] search_binary_handler+0x38e/0x5bc
[<0000000000282b6c>] do_execve_common+0x410/0x514
[<0000000000282cb6>] do_execve+0x46/0x58
[<00000000005bce58>] kernel_execve+0x28/0x70
[<000000000014ba2e>] ____call_usermodehelper+0x102/0x140
[<00000000005bc8da>] kernel_thread_starter+0x6/0xc
[<00000000005bc8d4>] kernel_thread_starter+0x0/0xc
Last Breaking-Event-Address:
[<00000000002830f0>] setup_new_exec+0x2fc/0x374
Kernel panic - not syncing: Fatal exception: panic_on_oops
Reported-by: Sebastian Ott <sebott@linux.vnet.ibm.com >
Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com >
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org >
2012-02-06 15:15:20 -08:00
2012-01-17 18:40:24 -08:00
2012-01-17 09:54:08 -05:00
2012-01-04 17:30:20 -02:00
2012-01-09 00:37:40 +01:00
2011-12-30 15:25:52 -08:00
2012-01-13 09:32:20 +10:30
2012-01-21 15:46:25 +00:00
2012-01-22 15:08:43 -05:00
2012-01-14 12:32:16 -08:00
2012-02-04 07:17:47 -08:00
2012-01-16 14:01:23 +01:00
2011-12-27 20:31:38 +01:00
2012-01-03 09:10:09 +01:00
2012-01-09 14:21:03 -08:00
2012-01-06 05:22:21 +04:00
2011-12-23 10:17:51 +11:00
2012-01-03 20:20:01 +00:00
2011-12-13 15:30:49 -05:00
2012-01-14 12:26:41 -08:00
2012-01-24 15:41:51 +02:00
2011-12-13 15:07:49 +00:00
2012-01-17 04:35:20 -05:00
2012-01-18 15:51:48 -08:00
2012-01-08 19:14:59 -05:00
2011-12-15 11:15:39 +01:00
2011-12-13 18:46:56 -05:00
2012-01-17 16:17:03 -05:00
2012-02-06 15:15:20 -08:00
2012-01-13 08:15:33 +01:00
2012-01-15 12:24:45 -08:00
2012-01-14 18:36:33 -08:00
2012-01-09 12:59:24 -08:00
2011-12-28 21:25:35 +08:00
2011-12-19 11:41:40 +01:00
2012-01-03 22:55:19 -05:00
2012-01-10 16:30:42 -08:00
2011-12-21 07:14:34 -05:00
2012-01-10 16:30:42 -08:00
2012-01-03 22:54:57 -05:00
2012-01-13 09:32:20 +10:30
2012-01-07 12:03:30 -08:00
2012-01-18 15:51:48 -08:00
2012-01-12 20:13:11 -08:00
2012-01-05 18:52:59 -05:00
2011-12-13 09:26:45 +00:00
2012-01-13 10:29:21 -08:00
2012-01-08 12:19:57 -08:00
2012-01-24 10:47:41 -08:00
2012-01-18 10:46:21 +11:00
2012-01-04 08:56:31 -06:00
2011-12-16 08:49:57 -08:00
2012-01-06 10:20:21 +00:00
2011-12-23 21:33:15 +05:30
2011-12-14 15:21:07 -08:00
2011-12-14 00:33:42 +01:00
2012-01-04 14:10:28 -05:00
2012-01-12 20:13:04 -08:00
2012-01-03 22:54:58 -05:00
2011-12-19 20:07:13 +00:00
2012-01-29 20:35:52 +01:00
2012-01-23 17:17:45 -08:00
2012-01-07 17:26:49 -05:00
2011-12-13 11:58:49 +01:00
2012-01-03 22:54:55 -05:00
2012-01-10 16:30:43 -08:00
2012-01-11 09:23:05 +00:00
2012-02-01 09:13:11 -08:00
2012-01-09 11:24:59 +01:00
2012-01-12 20:13:08 -08:00
2012-01-04 16:13:05 -08:00
2012-01-06 11:42:52 -08:00
2012-01-03 22:54:56 -05:00
2011-12-13 15:30:40 -05:00
2012-01-24 15:51:00 -05:00
2012-01-11 12:56:06 -08:00
2012-01-09 12:59:24 -08:00
2012-01-13 09:32:18 +10:30
2011-12-14 00:33:42 +01:00
2012-01-09 13:06:28 +01:00
2012-01-03 22:55:17 -05:00
2011-12-23 22:33:58 +00:00
2012-01-03 22:54:55 -05:00
2011-12-13 09:26:45 +00:00
2011-12-28 17:46:46 -05:00
2012-01-09 13:52:09 +01:00
2011-12-30 16:42:19 -05:00
2012-01-12 20:13:03 -08:00
2012-01-23 08:38:48 -08:00
2012-01-19 16:17:35 +11:00
2012-01-12 20:13:11 -08:00
2011-12-21 15:13:54 -08:00
2012-01-17 15:40:51 -08:00
2011-12-27 11:24:29 +02:00
2011-12-27 11:26:41 +02:00
2011-12-26 13:27:44 +02:00
2012-01-10 16:30:49 -08:00
2011-12-22 02:02:20 -05:00
2012-01-12 20:13:03 -08:00
2011-12-12 22:06:55 -08:00
2012-02-02 15:43:40 -08:00
2011-12-13 18:46:55 -05:00
2012-01-12 20:13:07 -08:00
2011-12-21 14:48:43 -08:00
2012-01-10 16:30:45 -08:00
2012-01-23 08:38:47 -08:00
2012-01-23 08:38:47 -08:00
2012-01-13 10:12:23 -08:00
2012-01-12 20:13:10 -08:00
2012-01-12 20:13:03 -08:00
2012-01-11 19:12:10 -08:00
2012-01-12 20:13:10 -08:00
2012-01-03 22:57:13 -05:00
2012-01-20 17:38:58 +00:00
2012-01-13 09:32:14 +10:30
2012-01-13 09:32:28 +10:30
2012-01-03 22:57:12 -05:00
2012-02-02 00:23:14 +11:00
2011-12-13 15:07:49 +00:00
2012-01-06 12:10:25 -08:00
2012-01-09 14:46:52 -08:00
2012-01-04 14:30:43 -05:00
2012-01-05 11:59:18 -05:00
2012-01-03 22:52:34 -05:00
2012-01-07 13:22:46 -05:00
2012-01-07 13:22:46 -05:00
2011-12-19 14:34:13 -05:00
2011-12-21 14:48:43 -08:00
2011-12-27 10:57:13 -06:00
2011-12-12 13:40:16 -07:00
2012-01-07 12:18:52 -08:00
2012-01-12 20:13:06 -08:00
2012-01-12 20:13:07 -08:00
2012-01-10 16:30:42 -08:00
2012-01-12 20:13:10 -08:00
2011-12-13 15:07:49 +00:00
2012-01-06 12:11:40 -08:00
2012-01-11 18:50:26 -08:00
2012-01-06 12:10:26 -08:00
2012-01-06 12:15:21 -08:00
2011-12-22 10:40:20 -08:00
2012-01-27 12:06:39 +01:00
2012-01-12 15:23:04 -08:00
2012-01-10 16:30:54 -08:00
2012-01-12 20:05:28 -08:00
2012-01-08 13:10:57 -08:00
2012-02-04 22:23:17 +01:00
2011-12-25 23:43:05 +01:00
2011-12-13 09:26:45 +00:00
2012-01-04 09:09:35 +04:00
2012-01-12 20:13:13 -08:00
2012-01-10 16:30:54 -08:00
2012-01-17 16:41:31 -08:00
2012-01-12 13:09:09 +01:00
2012-01-12 20:13:12 -08:00
2012-01-03 22:55:07 -05:00
2011-12-13 00:12:48 +08:00
2012-01-06 23:20:13 -05:00
2012-01-06 23:20:13 -05:00
2012-01-03 22:54:56 -05:00
2012-01-22 15:08:46 -05:00
2012-01-12 20:13:06 -08:00
2012-01-06 06:13:35 +04:00
2012-02-02 12:55:17 -08:00
2012-01-14 18:36:33 -08:00
2012-01-03 22:52:40 -05:00
2012-01-14 13:05:21 -08:00
2012-02-01 22:23:53 +05:30
2011-12-25 23:39:11 +01:00
2012-01-09 09:33:57 +09:00
2012-01-23 08:38:48 -08:00
2012-01-10 16:30:54 -08:00
2012-01-05 14:01:21 -05:00
2012-01-09 14:19:33 -08:00
2012-01-03 20:23:18 -05:00
2012-01-22 15:08:44 -05:00
2011-12-30 16:42:19 -05:00
2011-12-13 09:26:45 +00:00
2011-12-13 15:07:49 +00:00
2012-01-19 23:25:33 +01:00
2012-01-23 08:38:48 -08:00
2012-01-03 22:55:19 -05:00
2012-01-03 22:55:12 -05:00
2012-01-03 22:54:56 -05:00
2011-12-21 01:03:23 -05:00
2012-01-23 03:15:25 -05:00
2012-01-17 10:30:38 -08:00
2012-01-08 13:21:22 -08:00
2012-01-04 22:19:55 -08:00
2011-12-30 16:46:02 -05:00
2012-01-24 12:25:14 -08:00
2012-01-15 12:49:56 -08:00
2012-01-12 15:44:42 +10:30
2012-01-12 15:44:44 +10:30
2011-12-21 10:07:39 +01:00
2012-01-06 15:22:04 +01:00
2012-01-10 16:30:54 -08:00
2012-01-10 16:59:59 -08:00
96e02d1586