Lee Duncan 8808e8b9a9 scsi: iscsi: Restrict sessions and handles to admin capabilities ...

commit 688e8128b7 upstream.

Protect the iSCSI transport handle, available in sysfs, by requiring
CAP_SYS_ADMIN to read it. Also protect the netlink socket by restricting
reception of messages to ones sent with CAP_SYS_ADMIN. This disables
normal users from being able to end arbitrary iSCSI sessions.

Cc: stable@vger.kernel.org
Reported-by: Adam Nichols <adam@grimm-co.com>
Reviewed-by: Chris Leech <cleech@redhat.com>
Reviewed-by: Mike Christie <michael.christie@oracle.com>
Signed-off-by: Lee Duncan <lduncan@suse.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-16 10:40:13 +09:00

..

accessibility

…

acpi

ACPI: configfs: add missing check after configfs_register_default_group()

2023-05-16 10:38:19 +09:00

amba

amba: Fix resource leak for drivers without .remove

2023-05-16 10:37:49 +09:00

amlogic

tee: disable by default

2023-05-12 16:27:16 +09:00

android

UPSTREAM: binder: fix incorrect cmd to binder_stat_br

2023-05-16 09:46:39 +09:00

ata

ata: ahci_brcm: Add back regulators management

2023-05-16 10:37:22 +09:00

atm

atm: idt77252: call pci_disable_device() on error path

2023-05-16 10:24:54 +09:00

auxdisplay

auxdisplay: img-ascii-lcd: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE

2018-02-13 12:35:55 +01:00

base

Revert "device property: Keep secondary firmware node secondary by type"

2023-05-16 10:25:30 +09:00

bcma

bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA

2023-05-15 16:46:34 +09:00

block

floppy: reintroduce O_NDELAY fix

2023-05-16 10:38:43 +09:00

bluetooth

Bluetooth: btusb: fix PM leak in error case of setup

2023-05-15 16:30:44 +09:00

bus

mips: cdmm: fix use-after-free in mips_cdmm_bus_discover

2023-05-16 09:57:26 +09:00

cdrom

cdrom: respect device capabilities during opening action

2023-05-15 16:21:24 +09:00

char

random: fix the RNDRESEEDCRNG ioctl

2023-05-16 10:36:45 +09:00

clk

clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL

2023-05-16 10:37:30 +09:00

clocksource

clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined

2023-05-16 10:37:41 +09:00

connector

…

cpufreq

cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()

2023-05-16 10:26:09 +09:00

cpuidle

cpuidle: Fix three reference count leaks

2023-05-15 17:34:06 +09:00

crypto

crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe

2023-05-16 09:57:11 +09:00

dax

device-dax: implement ->split() to catch invalid munmap attempts

2018-02-28 10:18:33 +01:00

dca

…

devfreq

PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out

2023-05-16 09:14:54 +09:00

dio

…

dma

dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function

2023-05-16 10:37:35 +09:00

dma-buf

dma-buf: Fix memory leak in sync_file_merge()

2023-05-15 16:17:55 +09:00

edac

EDAC/i5100: Fix error handling order in i5100_init_one()

2023-05-16 09:37:32 +09:00

eisa

…

extcon

extcon: max77693: Fix modalias string

2023-05-16 09:58:06 +09:00

firewire

net: add annotations on hh->hh_len lockless accesses

2023-05-15 16:31:00 +09:00

firmware

efi: Make it possible to disable efivar_ssdt entirely

2023-05-16 08:29:32 +09:00

fmc

…

fpga

…

gpio

gpio: pcf857x: Fix missing first interrupt

2023-05-16 10:38:52 +09:00

gpu

drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY)

2023-05-16 10:38:06 +09:00

hardkernel

ODROID-G12: Make hid-multitouch and dwav-usb-mt driver as mouldes.

2022-03-15 09:20:56 +09:00

hid

HID: core: detect and skip invalid inputs to snto32()

2023-05-16 10:37:33 +09:00

hsi

HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()

2023-05-16 09:57:28 +09:00

hv

Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload

2023-05-16 09:13:23 +09:00

hwmon

hwmon: (applesmc) check status earlier.

2023-05-16 09:04:09 +09:00

hwspinlock

…

hwtracing

stm class: Fix module init return on allocation failure

2023-05-16 10:32:38 +09:00

i2c

i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition

2023-05-16 10:38:15 +09:00

ide

block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>

2023-05-16 09:04:57 +09:00

idle

x86/cpu: Sanitize FAM6_ATOM naming

2023-05-15 12:46:28 +09:00

iio

iio: ad5504: Fix setting power-down state

2023-05-16 10:32:37 +09:00

infiniband

RDMA/rxe: Fix coding error in rxe_recv.c

2023-05-16 10:37:52 +09:00

input

Input: i8042 - add ASUS Zenbook Flip to noselftest list

2023-05-16 10:38:24 +09:00

iommu

iommu/vt-d: Do not use flush-queue when caching-mode is on

2023-05-16 10:34:29 +09:00

ipack

…

irqchip

irqchip/alpine-msi: Fix freeing of interrupts on allocation error path

2023-05-16 09:58:09 +09:00

isdn

misdn: dsp: select CONFIG_BITREVERSE

2023-05-16 10:26:33 +09:00

leds

leds: trigger: fix potential deadlock with libata

2023-05-16 10:33:24 +09:00

lguest

…

lightnvm

…

macintosh

drivers/macintosh: Fix memleak in windfarm_pm112 driver

2023-05-15 17:34:39 +09:00

mailbox

mailbox: handle failed named mailbox channel request

2023-05-15 14:08:07 +09:00

mcb

…

md

dm era: Update in-core bitset after committing the metadata

2023-05-16 10:39:15 +09:00

media

media: uvcvideo: Allow entities with no pads

2023-05-16 10:40:12 +09:00

memory

memory: emif: Remove bogus debugfs error handling

2023-05-16 09:44:58 +09:00

memstick

memstick: r592: Fix error return in r592_probe()

2023-05-16 09:57:42 +09:00

message

scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()

2023-05-16 09:45:15 +09:00

mfd

mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()

2023-05-16 10:37:53 +09:00

misc

drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue

2023-05-16 10:38:39 +09:00

mmc

mmc: sdhci-esdhc-imx: fix kernel panic when remove module

2023-05-16 10:38:51 +09:00

mtd

mtd: spi-nor: hisi-sfc: Put child node np on error path

2023-05-16 10:38:44 +09:00

net

ath10k: fix wmi mgmt tx queue full due to race condition

2023-05-16 10:40:06 +09:00

nfc

nfc: s3fwrn5: Release the nfc firmware

2023-05-16 09:58:11 +09:00

ntb

NTB: hw: amd: fix an issue about leak system resources

2023-05-16 09:39:21 +09:00

nubus

…

nvdimm

libnvdimm/dimm: Avoid race between probe and available_slots_show()

2023-05-16 10:38:48 +09:00

nvme

nvmet: fix uninitialized work for zero kato

2023-05-16 09:39:20 +09:00

nvmem

nvmem: qfprom: remove incorrect write support

2023-05-15 17:31:34 +09:00

of

of/fdt: Make sure no-map does not remove already reserved regions

2023-05-16 10:37:38 +09:00

oprofile

…

parisc

parisc: mask out enable and reserved bits from sba imask

2023-05-16 08:47:32 +09:00

parport

parport: load lowlevel driver if ports not found

2023-05-15 16:19:36 +09:00

pci

PCI: Align checking of syscall user config accessors

2023-05-16 10:38:05 +09:00

pcmcia

pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges

2023-05-15 09:18:55 +09:00

perf

drivers/perf: arm_pmu: Fix failure path in PM notifier

2023-05-15 14:09:37 +09:00

phy

phy: tegra: xusb: Fix dangling pointer on probe failure

2023-05-16 09:50:08 +09:00

pinctrl

pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe()

2023-05-16 09:57:40 +09:00

platform

platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE

2023-05-16 09:55:41 +09:00

pnp

…

power

power: reset: at91-sama5d2_shdwc: fix wkupdbc mask

2023-05-16 10:37:39 +09:00

powercap

powercap: restrict energy meter to root access

2023-05-16 09:46:33 +09:00

pps

drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl

2023-05-15 14:08:51 +09:00

ps3

powerpc/ps3: use dma_mapping_error()

2023-05-16 09:58:13 +09:00

ptp

ptp: free ptp device pin descriptors properly

2023-05-15 17:27:25 +09:00

pwm

pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()

2023-05-16 10:38:03 +09:00

rapidio

rapidio: fix the missed put_device() for rio_mport_add_riodev

2023-05-16 09:38:59 +09:00

ras

…

regulator

regulator: axp20x: Fix reference cout leak

2023-05-16 10:37:42 +09:00

remoteproc

remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load

2023-05-16 10:35:30 +09:00

reset

reset: Fix potential use-after-free in __of_reset_control_get()

2023-05-15 15:12:21 +09:00

rpmsg

rpmsg: smd: fix memory leak on channel create

2023-05-15 09:23:11 +09:00

rtc

rtc: rx8010: don't modify the global rtc ops

2023-05-16 09:45:43 +09:00

s390

s390/dasd: fix hanging device offline processing

2023-05-16 10:00:17 +09:00

sbus

drivers/sbus/char: add of_node_put()

2023-05-15 10:37:00 +09:00

scsi

scsi: iscsi: Restrict sessions and handles to admin capabilities

2023-05-16 10:40:13 +09:00

sfi

…

sh

…

sn

…

soc

soc: qcom: smp2p: Safely acquire spinlock without IRQs

2023-05-16 09:59:37 +09:00

spi

spi: pxa2xx: Fix the controller numbering for Wildcat Point

2023-05-16 10:37:55 +09:00

spmi

…

ssb

ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit

2023-05-15 12:59:29 +09:00

staging

staging: most: sound: add sanity check for function argument

2023-05-16 10:40:10 +09:00

target

target: add XCOPY target/segment desc sense codes

2023-05-16 10:25:59 +09:00

tc

TC: Set DMA masks for devices

2023-05-15 09:23:01 +09:00

tee

UPSTREAM: tee: shm: fix use-after-free via temporarily dropped reference

2023-05-16 09:46:44 +09:00

thermal

UPSTREAM: thermal/drivers/hisi: Remove bogus const from function return type

2023-05-16 09:46:46 +09:00

thunderbolt

thunderbolt: Use 32-bit writes when writing ring producer/consumer

2023-05-15 14:55:28 +09:00

tty

vt/consolemap: do font sum unsigned

2023-05-16 10:40:01 +09:00

uio

uio_pdrv_genirq: fix use without device tree and no interrupt

2023-05-16 08:31:00 +09:00

usb

usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop()

2023-05-16 10:38:47 +09:00

uwb

uwb: hwa-rc: fix memory leak at probe

2023-05-15 08:28:33 +09:00

vfio

vfio/pci: Move dummy_resources_list init in vfio_pci_probe()

2023-05-16 10:00:16 +09:00

vhost

vhost_net: fix ubuf refcount incorrectly when sendmsg fails

2023-05-16 10:25:01 +09:00

video

fbdev: aty: SPARC64 requires FB_ATY_CT

2023-05-16 10:37:06 +09:00

virt

drivers/virt/fsl_hypervisor: Fix error handling path

2023-05-16 09:38:07 +09:00

virtio

virtio_ring: Avoid loop when vq is broken in virtqueue_poll

2023-05-16 08:54:57 +09:00

vlynq

…

vme

vme: bridges: reduce stack usage

2023-05-15 16:59:11 +09:00

w1

w1: mxc_w1: Fix timeout resolution problem leading to bus error

2023-05-16 09:45:14 +09:00

watchdog

watchdog: qcom: Avoid context switch in restart handler

2023-05-16 09:58:19 +09:00

xen

xen-scsiback: don't "handle" error by BUG()

2023-05-16 10:36:26 +09:00

zorro

zorro: Set up z->dev.dma_mask for the DMA API

2018-05-30 07:50:44 +02:00

Kconfig

ODROID: sysfs: Add poweroff_trigger sysfs node.

2019-12-11 18:21:09 +09:00

Makefile

ODROID: sysfs: Add poweroff_trigger sysfs node.

2019-12-11 18:21:09 +09:00