Levi Yun d7ad05c86e timers/migration: Prevent out of bounds access on failure ...

When tmigr_setup_groups() fails the level 0 group allocation, then the
cleanup derefences index -1 of the local stack array.

Prevent this by checking the loop condition first.

Fixes: 7ee9887703 ("timers: Implement the hierarchical pull model")
Signed-off-by: Levi Yun <ppbuk5246@gmail.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Reviewed-by: Anna-Maria Behnsen <anna-maria@linutronix.de>
Link: https://lore.kernel.org/r/20240506041059.86877-1-ppbuk5246@gmail.com

2024-05-08 11:19:43 +02:00

..

bpf

bpf: verifier: prevent userspace memory access

2024-04-26 09:45:18 -07:00

cgroup

Merge tag 'net-next-6.9' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2024-03-12 17:44:08 -07:00

configs

configs/hardening: Disable CONFIG_UBSAN_SIGNED_WRAP

2024-04-15 11:08:24 -07:00

debug

…

dma

swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y

2024-05-02 14:57:04 +02:00

entry

entry: Respect changes to system call number by trace_sys_enter()

2024-03-12 13:23:32 +01:00

events

Merge tag 'mm-stable-2024-03-13-20-04' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-03-14 17:43:30 -07:00

futex

…

gcov

…

irq

genirq: Introduce IRQF_COND_ONESHOT and use it in pinctrl-amd

2024-03-25 23:45:21 +01:00

kcsan

…

livepatch

…

locking

locking/rtmutex: Use try_cmpxchg_relaxed() in mark_rt_mutex_waiters()

2024-03-01 13:02:05 +01:00

module

Merge tag 'v6.9-p2' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

2024-03-25 10:48:23 -07:00

power

PM: s2idle: Make sure CPUs will wakeup directly on resume

2024-04-08 15:36:54 +02:00

printk

Merge tag 'printk-for-6.9-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux

2024-03-26 09:25:57 -07:00

rcu

Merge branches 'rcu-doc.2024.02.14a', 'rcu-nocb.2024.02.14a', 'rcu-exp.2024.02.14a', 'rcu-tasks.2024.02.26a' and 'rcu-misc.2024.02.14a' into rcu.2024.02.26a

2024-02-26 17:37:25 -08:00

sched

sched/isolation: Fix boot crash when maxcpus < first housekeeping CPU

2024-04-28 10:08:21 +02:00

time

timers/migration: Prevent out of bounds access on failure

2024-05-08 11:19:43 +02:00

trace

Merge tag 'probes-fixes-v6.9-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2024-05-05 09:56:50 -07:00

.gitignore

…

acct.c

…

async.c

async: Use a dedicated unbound workqueue with raised min_active

2024-02-09 11:13:59 -10:00

audit_fsnotify.c

…

audit_tree.c

…

audit_watch.c

…

audit.c

…

audit.h

…

auditfilter.c

…

auditsc.c

…

backtracetest.c

…

bounds.c

bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS

2024-04-29 08:29:29 -07:00

capability.c

…

cfi.c

…

compat.c

…

configs.c

…

context_tracking.c

context_tracking: Fix kerneldoc headers for __ct_user_{enter,exit}()

2024-02-14 07:53:50 -08:00

cpu_pm.c

…

cpu.c

cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n

2024-04-25 15:47:39 +02:00

crash_core.c

crash: split crash dumping code out from kexec_core.c

2024-02-23 17:48:22 -08:00

crash_reserve.c

crash: use macro to add crashk_res into iomem early for specific arch

2024-03-26 11:14:12 -07:00

cred.c

cred: Use KMEM_CACHE() instead of kmem_cache_create()

2024-02-23 17:33:31 -05:00

delayacct.c

…

dma.c

…

elfcorehdr.c

crash: remove dependency of FA_DUMP on CRASH_DUMP

2024-02-23 17:48:22 -08:00

exec_domain.c

…

exit.c

Merge tag 'vfs-6.9.pidfd' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2024-03-11 10:21:06 -07:00

exit.h

…

extable.c

…

fail_function.c

…

fork.c

fork: defer linking file vma until vma is fully initialized

2024-04-16 15:39:51 -07:00

freezer.c

…

gen_kheaders.sh

…

groups.c

…

hung_task.c

kernel/hung_task.c: export sysctl_hung_task_timeout_secs

2024-03-13 21:22:04 -04:00

iomem.c

…

irq_work.c

…

jump_label.c

…

kallsyms_internal.h

…

kallsyms_selftest.c

mm/vmalloc: remove vmap_area_list

2024-02-23 17:48:19 -08:00

kallsyms_selftest.h

…

kallsyms.c

…

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.kexec

crash: clean up kdump related config items

2024-02-23 17:48:22 -08:00

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

…

kexec_core.c

Merge tag 'mm-nonmm-stable-2024-03-14-09-36' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-03-14 18:03:09 -07:00

kexec_elf.c

…

kexec_file.c

arm64, crash: wrap crash dumping code into crash related ifdefs

2024-02-23 17:48:23 -08:00

kexec_internal.h

crash: remove dependency of FA_DUMP on CRASH_DUMP

2024-02-23 17:48:22 -08:00

kexec.c

crash: split crash dumping code out from kexec_core.c

2024-02-23 17:48:22 -08:00

kheaders.c

…

kprobes.c

kprobes: Fix possible use-after-free issue on kprobe registration

2024-04-10 23:35:51 +09:00

ksyms_common.c

…

ksysfs.c

Merge tag 'driver-core-6.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2024-03-21 13:34:15 -07:00

kthread.c

…

latencytop.c

…

Makefile

crash: split crash dumping code out from kexec_core.c

2024-02-23 17:48:22 -08:00

module_signature.c

…

notifier.c

…

nsproxy.c

pidfd: add pidfs

2024-03-01 12:23:37 +01:00

numa.c

…

padata.c

Author: Gang Li padata: dispatch works on

2024-03-06 13:04:17 -08:00

panic.c

Merge tag 'mm-nonmm-stable-2024-03-14-09-36' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-03-14 18:03:09 -07:00

params.c

…

pid_namespace.c

…

pid_sysctl.h

…

pid.c

pidfs: remove config option

2024-03-13 12:53:53 -07:00

profile.c

profiling: Remove create_prof_cpu_mask().

2024-04-27 11:17:48 -07:00

ptrace.c

ptrace_attach: shift send(SIGSTOP) into ptrace_set_stopped()

2024-02-22 15:38:52 -08:00

range.c

…

reboot.c

…

regset.c

…

relay.c

…

resource_kunit.c

…

resource.c

…

rseq.c

…

scftorture.c

…

scs.c

…

seccomp.c

…

signal.c

Merge tag 'mm-nonmm-stable-2024-03-14-09-36' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2024-03-14 18:03:09 -07:00

smp.c

…

smpboot.c

…

smpboot.h

…

softirq.c

softirq: Fix suspicious RCU usage in __do_softirq()

2024-04-29 05:03:51 +02:00

stackleak.c

…

stacktrace.c

…

static_call_inline.c

…

static_call.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

prctl: generalize PR_SET_MDWE support check to be per-arch

2024-03-26 11:07:22 -07:00

sysctl-test.c

…

sysctl.c

tracing: Support to dump instance traces by ftrace_dump_on_oops

2024-03-18 10:33:06 -04:00

task_work.c

…

taskstats.c

…

torture.c

…

tracepoint.c

…

tsacct.c

…

ucount.c

…

uid16.c

…

uid16.h

…

umh.c

…

up.c

…

user_namespace.c

user_namespace: remove unnecessary NULL values from kbuf

2024-02-22 15:38:52 -08:00

user-return-notifier.c

…

user.c

…

usermode_driver.c

…

utsname_sysctl.c

…

utsname.c

…

vhost_task.c

…

vmcore_info.c

mm: turn folio_test_hugetlb into a PageType

2024-04-24 19:34:26 -07:00

watch_queue.c

…

watchdog_buddy.c

…

watchdog_perf.c

…

watchdog.c

watchdog/core: remove sysctl handlers from public header

2024-03-12 13:09:23 -07:00

workqueue_internal.h

…

workqueue.c

workqueue: Fix divide error in wq_update_node_max_active()

2024-04-24 07:23:06 -10:00