Dmitry Antipov faa9059631 module: ensure that kobject_put() is safe for module type kobjects ...

commit a6aeb739974ec73e5217c75a7c008a688d3d5cf1 upstream.

In 'lookup_or_create_module_kobject()', an internal kobject is created
using 'module_ktype'. So call to 'kobject_put()' on error handling
path causes an attempt to use an uninitialized completion pointer in
'module_kobject_release()'. In this scenario, we just want to release
kobject without an extra synchronization required for a regular module
unloading process, so adding an extra check whether 'complete()' is
actually required makes 'kobject_put()' safe.

Reported-by: syzbot+7fb8a372e1f6add936dd@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=7fb8a372e1f6add936dd
Fixes: 942e443127 ("module: Fix mod->mkobj.kobj potentially freed too early")
Cc: stable@vger.kernel.org
Suggested-by: Petr Pavlu <petr.pavlu@suse.com>
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Link: https://lore.kernel.org/r/20250507065044.86529-1-dmantipov@yandex.ru
Signed-off-by: Petr Pavlu <petr.pavlu@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-05-18 08:24:08 +02:00

..

bpf

bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs

2025-05-09 09:43:55 +02:00

cgroup

cgroup: fix race between fork and cgroup.kill

2025-02-21 13:57:17 +01:00

configs

Merge tag 'kbuild-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild

2023-09-05 11:01:47 -07:00

debug

kdb: Use the passed prompt in kdb_position_cursor()

2024-08-03 08:54:34 +02:00

dma

dma/contiguous: avoid warning about unused size_bytes

2025-05-02 07:50:42 +02:00

entry

entry: Respect changes to system call number by trace_sys_enter()

2024-04-03 15:28:50 +02:00

events

perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init

2025-05-02 07:50:58 +02:00

futex

futex: Don't include process MM in futex key on no-MMU

2023-11-20 11:58:53 +01:00

gcov

gcov: add support for GCC 14

2024-06-27 13:49:13 +02:00

irq

genirq: Make handle_enforce_irqctx() unconditionally available

2025-02-08 09:51:48 +01:00

kcsan

kcsan: Turn report_filterlist_lock into a raw_spinlock

2024-12-14 19:59:59 +01:00

livepatch

livepatch: Fix missing newline character in klp_resolve_symbols()

2023-11-20 11:59:25 +01:00

locking

locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()

2025-04-25 10:45:29 +02:00

module

module: sign with sha512 instead of sha1 by default

2025-05-02 07:50:36 +02:00

power

PM: hibernate: Add error handling for syscore_suspend()

2025-02-08 09:52:29 +01:00

printk

printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

2025-02-17 09:40:04 +01:00

rcu

rcuscale: Do a proper cleanup if kfree_scale_init() fails

2024-12-09 10:31:50 +01:00

sched

cpufreq/sched: Explicitly synchronize limits_changed flag handling

2025-05-02 07:50:41 +02:00

time

timekeeping: Add a lockdep override in tick_freeze()

2025-05-02 07:51:00 +02:00

trace

tracing: Fix oob write in trace_seq_to_buffer()

2025-05-09 09:43:53 +02:00

.gitignore

…

acct.c

acct: block access to kernel internal filesystems

2025-02-27 04:10:52 -08:00

async.c

async: Introduce async_schedule_dev_nocall()

2024-01-31 16:18:49 -08:00

audit_fsnotify.c

audit: fix potential double free on error path from fsnotify_add_inode_mark

2022-08-22 18:50:06 -04:00

audit_tree.c

audit: use fsnotify group lock helpers

2022-04-25 14:37:28 +02:00

audit_watch.c

audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()

2023-11-28 17:19:56 +00:00

audit.c

audit: Send netlink ACK before setting connection in auditd_set

2024-02-05 20:14:14 +00:00

audit.h

audit: correct audit_filter_inodes() definition

2023-07-21 12:17:25 -04:00

auditfilter.c

ima: Avoid blocking in RCU read-side critical section

2024-07-11 12:49:18 +02:00

auditsc.c

audit,io_uring: io_uring openat triggers audit reference count underflow

2023-10-13 18:34:46 +02:00

backtracetest.c

…

bounds.c

bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS

2024-05-02 16:32:50 +02:00

capability.c

lsm: constify the 'target' parameter in security_capget()

2023-08-08 16:48:47 -04:00

cfi.c

cfi: Switch to -fsanitize=kcfi

2022-09-26 10:13:13 -07:00

compat.c

sched_getaffinity: don't assume 'cpumask_size()' is fully initialized

2023-03-14 19:32:38 -07:00

configs.c

…

context_tracking.c

locking/atomic: treewide: use raw_atomic*_<op>()

2023-06-05 09:57:20 +02:00

cpu_pm.c

cpuidle, cpu_pm: Remove RCU fiddling from cpu_pm_{enter,exit}()

2023-01-13 11:48:15 +01:00

cpu.c

hrtimers: Handle CPU state correctly on hotplug

2025-01-23 17:21:17 +01:00

crash_core.c

mm: turn folio_test_hugetlb into a PageType

2024-05-02 16:32:47 +02:00

crash_dump.c

…

cred.c

cred: get rid of CONFIG_DEBUG_CREDENTIALS

2023-12-20 17:01:51 +01:00

delayacct.c

delayacct: track delays from IRQ/SOFTIRQ

2023-04-18 16:39:34 -07:00

dma.c

…

exec_domain.c

…

exit.c

mm: optimize the redundant loop of mm_update_owner_next()

2024-07-11 12:49:15 +02:00

extable.c

context_tracking: Take NMI eqs entrypoints over RCU

2022-07-05 13:32:59 -07:00

fail_function.c

kernel/fail_function: fix memory leak with using debugfs_lookup()

2023-02-08 13:36:22 +01:00

fork.c

x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()

2025-04-10 14:37:30 +02:00

freezer.c

freezer,sched: Rewrite core freezer logic

2022-09-07 21:53:50 +02:00

gen_kheaders.sh

kheaders: Ignore silly-rename files

2025-01-23 17:21:13 +01:00

groups.c

security: Add LSM hook to setgroups() syscall

2022-07-15 18:21:49 +00:00

hung_task.c

kernel/hung_task.c: set some hung_task.c variables storage-class-specifier to static

2023-04-08 13:45:37 -07:00

iomem.c

kernel/iomem.c: remove __weak ioremap_cache helper

2023-08-21 13:37:28 -07:00

irq_work.c

trace: Add trace_ipi_send_cpu()

2023-03-24 11:01:29 +01:00

jump_label.c

jump_label: Fix static_key_slow_dec() yet again

2024-10-10 11:57:13 +02:00

kallsyms_internal.h

kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[]

2022-11-12 18:47:36 -08:00

kallsyms_selftest.c

Merge tag 'modules-6.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mcgrof/linux

2023-08-29 17:32:32 -07:00

kallsyms_selftest.h

kallsyms: Add self-test facility

2022-11-15 00:42:02 -08:00

kallsyms.c

kallsyms: Change func signature for cleanup_symbol_name()

2023-08-25 15:00:36 -07:00

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.kexec

kexec: select CRYPTO from KEXEC_FILE instead of depending on it

2024-01-05 15:19:41 +01:00

Kconfig.locks

…

Kconfig.preempt

Revert "signal, x86: Delay calling signals in atomic on RT enabled kernels"

2022-03-31 10:36:55 +02:00

kcov.c

kcov: mark in_softirq_really() as __always_inline

2025-01-09 13:32:07 +01:00

kexec_core.c

kexec: do syscore_shutdown() in kernel_kexec

2024-01-31 16:18:56 -08:00

kexec_elf.c

kexec: initialize ELF lowest address to ULONG_MAX

2025-04-10 14:37:34 +02:00

kexec_file.c

kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y

2024-09-12 11:11:27 +02:00

kexec_internal.h

panic, kexec: make __crash_kexec() NMI safe

2022-09-11 21:55:06 -07:00

kexec.c

kernel: kexec: copy user-array safely

2023-11-28 17:19:40 +00:00

kheaders.c

kheaders: Use array declaration instead of char

2023-03-24 20:10:59 -07:00

kprobes.c

kprobes: Fix to check symbol prefixes correctly

2024-08-14 13:58:51 +02:00

ksyms_common.c

kallsyms: make kallsyms_show_value() as generic function

2023-06-08 12:27:20 -07:00

ksysfs.c

crash: hotplug support for kexec_load()

2023-08-24 16:25:14 -07:00

kthread.c

kthread: unpark only parked kthread

2024-10-17 15:24:37 +02:00

latencytop.c

latencytop: use the last element of latency_record of system

2022-09-11 21:55:12 -07:00

Makefile

kernel/numa.c: Move logging out of numa.h

2024-06-12 11:11:50 +02:00

module_signature.c

…

notifier.c

notifiers: add tracepoints to the notifiers infrastructure

2023-04-08 13:45:38 -07:00

nsproxy.c

nsproxy: Convert nsproxy.count to refcount_t

2023-08-21 11:29:12 -07:00

numa.c

kernel/numa.c: Move logging out of numa.h

2024-06-12 11:11:50 +02:00

padata.c

padata: avoid UAF for reorder_work

2025-02-08 09:52:09 +01:00

panic.c

objtool, panic: Disable SMAP in __stack_chk_fail()

2025-05-02 07:50:55 +02:00

params.c

module: ensure that kobject_put() is safe for module type kobjects

2025-05-18 08:24:08 +02:00

pid_namespace.c

zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING

2024-06-21 14:38:50 +02:00

pid_sysctl.h

memfd: replace ratcheting feature from vm.memfd_noexec with hierarchy

2023-08-21 13:37:59 -07:00

pid.c

pidfd: prevent a kernel-doc warning

2023-09-19 13:21:33 -07:00

profile.c

profiling: remove profile=sleep support

2024-08-14 13:58:47 +02:00

ptrace.c

ptrace: Provide set/get interface for syscall user dispatch

2023-04-16 14:23:07 +02:00

range.c

…

reboot.c

kernel/reboot: emergency_restart: Set correct system_state

2023-11-28 17:20:04 +00:00

regset.c

…

relay.c

kernel: relay: remove unnecessary NULL values from relay_open_buf

2023-08-18 10:18:55 -07:00

resource_kunit.c

…

resource.c

resource: fix region_intersects() vs add_memory_driver_managed()

2024-10-10 11:57:50 +02:00

rseq.c

rseq: Extend struct rseq with per-memory-map concurrency ID

2022-12-27 12:52:12 +01:00

scftorture.c

scftorture: Pause testing after memory-allocation failure

2023-07-14 15:02:57 -07:00

scs.c

scs: add support for dynamic shadow call stacks

2022-11-09 18:06:35 +00:00

seccomp.c

seccomp: Add missing kerndoc notations

2023-08-17 12:32:15 -07:00

signal.c

posix-timers: Target group sigqueue to current task only if not exiting

2024-12-09 10:33:11 +01:00

smp.c

smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()

2024-09-12 11:11:37 +02:00

smpboot.c

kthread: add kthread_stop_put

2024-06-12 11:12:52 +02:00

smpboot.h

…

softirq.c

softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel

2025-01-09 13:31:48 +01:00

stackleak.c

stackleak: allow to specify arch specific stackleak poison function

2023-04-20 11:36:35 +02:00

stacktrace.c

uaccess: remove CONFIG_SET_FS

2022-02-25 09:36:06 +01:00

static_call_inline.c

x86/static-call: provide a way to do very early static-call updates

2024-12-19 18:11:36 +01:00

static_call.c

static_call: Don't make __static_call_return0 static

2022-04-05 09:59:38 +02:00

stop_machine.c

Merge tag 'sched-core-2022-05-23' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2022-05-24 11:11:13 -07:00

sys_ni.c

syscalls: fix compat_sys_io_pgetevents_time64 usage

2024-07-05 09:34:04 +02:00

sys.c

hrtimer: Use and report correct timerslack values for realtime tasks

2025-03-22 12:50:37 -07:00

sysctl-test.c

kernel/sysctl-test: use SYSCTL_{ZERO/ONE_HUNDRED} instead of i_{zero/one_hundred}

2022-09-08 16:56:45 -07:00

sysctl.c

Merge tag 'v6.5-rc1-sysctl-next' of git://git.kernel.org/pub/scm/linux/kernel/git/mcgrof/linux

2023-06-28 16:05:21 -07:00

task_work.c

task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK

2024-11-01 01:58:34 +01:00

taskstats.c

genetlink: start to validate reserved header bytes

2022-08-29 12:47:15 +01:00

torture.c

rcutorture: Fix stuttering races and other issues

2023-11-28 17:20:08 +00:00

tracepoint.c

tracepoint: Allow livepatch module add trace event

2023-02-18 14:34:36 -05:00

tsacct.c

taskstats: version 12 with thread group and exe info

2022-04-29 14:38:03 -07:00

ucount.c

ucounts: fix counter leak in inc_rlimit_get_ucounts()

2024-11-14 13:19:40 +01:00

uid16.c

…

uid16.h

…

umh.c

sysctl: fix unused proc_cap_handler() function warning

2023-06-29 15:19:43 -07:00

up.c

…

user_namespace.c

userns: fix a struct's kernel-doc notation

2023-02-02 22:50:04 -08:00

user-return-notifier.c

…

user.c

kernel/user: Allow user_struct::locked_vm to be usable for iommufd

2022-11-30 20:16:49 -04:00

usermode_driver.c

blob_to_mnt(): kern_unmount() is needed to undo kern_mount()

2022-05-19 23:25:47 -04:00

utsname_sysctl.c

utsname: simplify one-level sysctl registration for uts_kern_table

2023-04-13 11:49:35 -07:00

utsname.c

…

vhost_task.c

vhost_task: Handle SIGKILL by flushing work and exiting

2024-07-11 12:49:10 +02:00

watch_queue.c

watch_queue: fix pipe accounting mismatch

2025-04-10 14:37:25 +02:00

watchdog_buddy.c

watchdog/hardlockup: move SMP barriers from common code to buddy code

2023-06-19 16:25:28 -07:00

watchdog_perf.c

watchdog/perf: properly initialize the turbo mode timestamp and rearm counter

2024-08-03 08:54:29 +02:00

watchdog.c

watchdog: move softlockup_panic back to early_param

2023-11-28 17:19:57 +00:00

workqueue_internal.h

workqueue: Drop the special locking rule for worker->flags and worker_pool->flags

2023-08-07 15:57:22 -10:00

workqueue.c

workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker

2025-01-17 13:36:25 +01:00