Roger Pau Monne 4fbda9d1fc xen/blkfront: fix leaking data in shared pages ...

commit 2f446ffe9d upstream.

When allocating pages to be used for shared communication with the
backend always zero them, this avoids leaking unintended data present
on the pages.

This is CVE-2022-26365, part of XSA-403.

Signed-off-by: Roger Pau Monné <roger.pau@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Juergen Gross <jgross@suse.com>
Signed-off-by: Juergen Gross <jgross@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-07-07 17:30:11 +02:00

..

aoe

aoe: fix crash in page count manipulation

2016-11-12 08:27:07 -07:00

drbd

drbd: remove usage of list iterator variable after loop

2022-05-25 08:39:48 +02:00

mtip32xx

Revert "mtip32xx: use runtime tag to initialize command header"

2018-04-08 12:13:01 +02:00

paride

cdrom: do not call check_disk_change() inside cdrom_open()

2018-05-30 07:50:47 +02:00

rsxx

block: rsxx: fix error return code of rsxx_pci_probe()

2021-03-17 16:10:18 +01:00

xen-blkback

xen-blkback: don't leak persistent grants from xen_blkbk_map()

2021-03-30 14:41:43 +02:00

zram

zsmalloc: account the number of compacted pages correctly

2021-03-07 11:25:59 +01:00

amiflop.c

amiflop: clean up on errors during setup

2019-11-28 18:28:23 +01:00

ataflop.c

ataflop: fix error handling during setup

2018-11-13 11:16:49 -08:00

brd.c

block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>

2020-09-12 11:47:36 +02:00

cciss_cmd.h

…

cciss_scsi.c

…

cciss_scsi.h

…

cciss.c

…

cciss.h

…

cryptoloop.c

cryptoloop: add a deprecation warning

2021-09-22 11:42:55 +02:00

DAC960.c

block: DAC960: print a hex number after a 0x prefix

2016-10-27 18:43:43 -07:00

DAC960.h

…

floppy.c

floppy: use a statically allocated error counter

2022-05-25 08:39:47 +02:00

hd.c

…

Kconfig

floppy: disable FDRAWCMD by default

2022-05-12 12:14:53 +02:00

loop.c

loop: use sysfs_emit() in the sysfs xxx show()

2022-04-20 09:06:38 +02:00

loop.h

Revert "block/loop: Use global lock for ioctl() operation."

2019-05-02 09:32:04 +02:00

Makefile

…

mg_disk.c

…

nbd.c

nbd: Use set_blocksize() to set device blocksize

2019-01-23 08:10:57 +01:00

null_blk.c

Merge branch 'for-4.9/block-irq' of git://git.kernel.dk/linux-block

2016-10-09 17:29:33 -07:00

osdblk.c

…

pktcdvd.c

pktcdvd: Fix pkt_setup_dev() error path

2018-02-17 13:21:19 +01:00

ps3disk.c

ps3disk: use the default segment boundary

2020-06-30 15:38:21 -04:00

ps3vram.c

…

rbd_types.h

rbd: support for exclusive-lock feature

2016-08-24 23:49:16 +02:00

rbd.c

rbd: require global CAP_SYS_ADMIN for mapping and unmapping

2020-09-23 08:46:12 +02:00

skd_main.c

skd: Submit requests to firmware before triggering the doorbell

2017-09-27 14:39:21 +02:00

skd_s1120.h

…

smart1,2.h

…

sunvdc.c

sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN

2019-02-12 19:44:53 +01:00

swim3.c

block/swim3: Fix -EBUSY error when re-opening device after unmount

2019-02-12 19:44:58 +01:00

swim_asm.S

…

swim.c

swim: fix cleanup on setup error

2018-11-13 11:16:49 -08:00

sx8.c

…

umem.c

block: rename bio bi_rw to bi_opf

2016-08-07 14:41:02 -06:00

umem.h

…

virtio_blk.c

virtio-blk: Use blk_validate_block_size() to validate block size

2022-04-20 09:06:28 +02:00

xen-blkfront.c

xen/blkfront: fix leaking data in shared pages

2022-07-07 17:30:11 +02:00

xsysace.c

xsysace: Fix error handling in ace_setup

2019-05-08 07:19:11 +02:00

z2ram.c

…