Commit f125c1cf authored by Ankit Khushwaha's avatar Ankit Khushwaha Committed by Greg Kroah-Hartman
Browse files

ring buffer: Propagate __rb_map_vma return value to caller

commit de4cbd70 upstream.

The return value from `__rb_map_vma()`, which rejects writable or
executable mappings (VM_WRITE, VM_EXEC, or !VM_MAYSHARE), was being
ignored. As a result the caller of `__rb_map_vma` always returned 0
even when the mapping had actually failed, allowing it to proceed
with an invalid VMA.

Cc: stable@vger.kernel.org
Cc: Masami Hiramatsu <mhiramat@kernel.org>
Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
Link: https://lore.kernel.org/20251008172516.20697-1-ankitkhushwaha.linux@gmail.com


Fixes: 117c3920 ("ring-buffer: Introducing ring-buffer mapping functions")
Reported-by: default avatar <syzbot+ddc001b92c083dbf2b97@syzkaller.appspotmail.com>
Closes: https://syzkaller.appspot.com/bug?id=194151be8eaebd826005329b2e123aecae714bdb


Signed-off-by: default avatarAnkit Khushwaha <ankitkhushwaha.linux@gmail.com>
Signed-off-by: default avatarSteven Rostedt (Google) <rostedt@goodmis.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 3a062a5c
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment