Herbert Xu 5030d4c798 hwrng: core - Fix page fault dead lock on mmap-ed hwrng ...

commit 78aafb3884f6bc6636efcc1760c891c8500b9922 upstream.

There is a dead-lock in the hwrng device read path.  This triggers
when the user reads from /dev/hwrng into memory also mmap-ed from
/dev/hwrng.  The resulting page fault triggers a recursive read
which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.

Reported-by: Edward Adam Davis <eadavis@qq.com>
Reported-by: syzbot+c52ab18308964d248092@syzkaller.appspotmail.com
Fixes: 9996508b33 ("hwrng: core - Replace u32 in driver API with byte array")
Cc: <stable@vger.kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-02-23 08:24:48 +01:00

..

agp

parisc: sba: Fix compile warning wrt list of SBA devices

2023-10-10 21:46:39 +02:00

hw_random

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

2024-02-23 08:24:48 +01:00

ipmi

ipmi_si: fix a memleak in try_smi_init()

2023-09-23 10:59:54 +02:00

mwave

char/mwave: Adjust io port register size

2022-01-27 09:19:38 +01:00

pcmcia

char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()

2021-07-14 16:53:40 +02:00

tpm

tpm_tis: Resend command to recover from data transfer errors

2023-09-23 11:00:03 +02:00

xilinx_hwicap

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

xillybus

PCI: Move ASPM declarations to linux/pci.h

2019-08-28 08:28:39 -05:00

adi.c

…

apm-emulation.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

applicom.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

applicom.h

…

bsr.c

Merge 5.2-rc4 into char-misc-next

2019-06-09 09:11:21 +02:00

ds1620.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

dsp56k.c

…

dtlk.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

efirtc.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

hangcheck-timer.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 405

2019-06-05 17:37:13 +02:00

hpet.c

char: hpet: add checks after calling ioremap

2021-06-03 08:59:09 +02:00

Kconfig

random: credit cpu and bootloader seeds by default

2022-06-22 14:11:21 +02:00

lp.c

lp: fix sparc64 LPSETTIMEOUT ioctl

2019-12-13 08:42:17 +01:00

Makefile

char: remove the SGI tiocx/mbcs driver

2019-08-16 11:33:56 -07:00

mem.c

random: restore O_NONBLOCK support

2022-10-15 07:54:40 +02:00

misc.c

char: misc: Move EXPORT_SYMBOL immediately next to the functions/varibles

2019-05-24 18:00:41 +02:00

mspec.c

char/mspec: remove SGI SN2 support

2019-08-16 11:33:56 -07:00

nsc_gpio.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

nvram.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

nwbutton.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

nwbutton.h

…

nwflash.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

pc8736x_gpio.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

powernv-op-panel.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ppdev.c

ppdev: fix PPGETTIME/PPSETTIME ioctls

2019-12-17 19:56:41 +01:00

ps3flash.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 164

2019-05-30 11:26:38 -07:00

random.c

random: use expired timer rather than wq for mixing fast pool

2022-10-15 07:54:40 +02:00

raw.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

rtc.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

scx200_gpio.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

sonypi.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 61

2019-05-24 17:36:45 +02:00

tb0219.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

tlclk.c

drivers: char: tlclk.c: Avoid data race between init and interrupt handler

2020-10-01 13:17:56 +02:00

toshiba.c

toshiba: Add correct printk log level while emitting error log

2019-09-04 13:42:43 +02:00

ttyprintk.c

ttyprintk: Add TTY hangup callback.

2021-05-14 09:44:23 +02:00

uv_mmtimer.c

…

virtio_console.c

virtio_console: eliminate anonymous module_init & module_exit

2022-04-15 14:18:36 +02:00