Jann Horn de23c77fdb mm: enforce min addr even if capable() in expand_downwards() ... commit 0a1d52994d440e21def1c2174932410b4f2a98a1 upstream. security_mmap_addr() does a capability check with current_cred(), but we can reach this code from contexts like a VFS write handler where current_cred() must not be used. This can be abused on systems without SMAP to make NULL pointer dereferences exploitable again. Fixes: 8869477a49 ("security: protect from stack expansion into low vm addresses") Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Ben Hutchings <ben@decadent.org.uk>		2019-07-27 22:10:23 +02:00
..
kasan
backing-dev.c
balloon_compaction.c
bootmem.c
bounce.c	mm: convert some level-less printks to pr_*	2019-07-27 22:08:13 +02:00
cleancache.c
compaction.c	Import latest Samsung release	2017-04-18 03:43:52 +02:00
debug-pagealloc.c
dmapool.c
early_ioremap.c
fadvise.c	mm/fadvise.c: fix signed overflow UBSAN complaint	2019-07-27 21:51:37 +02:00
failslab.c
filemap.c	mm, fs: check for fatal signals in do_generic_file_read()	2019-07-27 21:43:51 +02:00
filemap_xip.c
fremap.c
frontswap.c
highmem.c
huge_memory.c	mm, thp: fix collapsing of hugepages on madvise	2019-07-27 22:08:13 +02:00
hugetlb.c
hugetlb_cgroup.c
hwpoison-inject.c
init-mm.c
internal.h
interval_tree.c
Kconfig	Import T813XXS2BRC2 kernel source changes	2018-05-26 00:39:42 +02:00
Kconfig.debug
kmemcheck.c
kmemleak-test.c
kmemleak.c
ksm.c	mm,ksm: fix endless looping in allocating memory when ksm enable	2019-07-27 21:42:51 +02:00
maccess.c
madvise.c	mm/madvise.c: fix madvise() infinite loop under special circumstances	2019-07-27 21:45:21 +02:00
Makefile	mm: per-thread vma caching	2019-07-27 22:08:06 +02:00
memblock.c
memcontrol.c
memory-failure.c	mm: hwpoison: use do_send_sig_info() instead of force_sig()	2019-07-27 22:10:18 +02:00
memory.c	mm: use vma_pages() to replace (vm_end - vm_start) >> PAGE_SHIFT	2019-07-27 22:08:09 +02:00
memory_hotplug.c	mm/memory_hotplug.c: check start_pfn in test_pages_in_a_zone()	2019-07-27 21:43:51 +02:00
mempolicy.c	mm: convert some level-less printks to pr_*	2019-07-27 22:08:13 +02:00
mempool.c
memtest.c
migrate.c	Sanitize 'move_pages()' permission checks	2019-07-27 21:44:50 +02:00
mincore.c
mlock.c	mm: do not bug_on on incorrect length in __mm_populate()	2019-07-27 22:08:08 +02:00
mm_init.c
mmap.c	mm: enforce min addr even if capable() in expand_downwards()	2019-07-27 22:10:23 +02:00
mmu_context.c
mmu_notifier.c
mmzone.c
mprotect.c	mm/mprotect: add a cond_resched() inside change_pmd_range()	2019-07-27 21:46:25 +02:00
mremap.c	mremap: properly flush TLB before releasing the page	2019-07-27 21:53:28 +02:00
msync.c
nobootmem.c
nommu.c	mm: convert some level-less printks to pr_*	2019-07-27 22:08:13 +02:00
oom_kill.c	mm, oom: fix use-after-free in oom_kill_process	2019-07-27 22:05:56 +02:00
page-writeback.c	Import latest Samsung release	2017-04-18 03:43:52 +02:00
page_alloc.c	ANDROID: Remove conflicting Samsung options for upstream changes	2019-07-27 22:09:50 +02:00
page_cgroup.c
page_io.c	Import latest Samsung release	2017-04-18 03:43:52 +02:00
page_isolation.c	mm: add zone counter for cma pages	2019-07-27 21:51:09 +02:00
pageowner.c
pagewalk.c	pagewalk: improve vma handling	2019-07-27 21:51:51 +02:00
percpu-km.c
percpu-vm.c
percpu.c
pgtable-generic.c
process_reclaim.c	Revert "lowmemorykiller: Introduce sysfs node for ALMK and PPR adj threshold"	2019-07-27 22:09:43 +02:00
process_vm_access.c
quicklist.c
readahead.c	readahead: make context readahead more conservative	2019-07-27 21:49:54 +02:00
rmap.c	mm: fix anon_vma->degree underflow in anon_vma endless growing prevention	2019-07-27 22:08:15 +02:00
shmem.c	tmpfs: fix uninitialized return value in shmem_link	2019-07-27 22:09:41 +02:00
showmem.c	Import latest Samsung release	2017-04-18 03:43:52 +02:00
slab.c	cpuset: PF_SPREAD_PAGE and PF_SPREAD_SLAB should be atomic flags	2019-07-27 21:44:59 +02:00
slab.h
slab_common.c
slob.c
slub.c
sparse-vmemmap.c
sparse.c
swap.c
swap_state.c	Revert "lowmemorykiller: Don't count swap cache pages twice"	2019-07-27 22:09:45 +02:00
swapfile.c	swapfile: fix memory corruption via malformed swapfile	2019-07-27 21:42:14 +02:00
truncate.c
util.c	Import latest Samsung release	2017-04-18 03:43:52 +02:00
vmacache.c	mm: get rid of vmacache_flush_all() entirely	2019-07-27 22:08:09 +02:00
vmalloc.c	mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512!	2019-07-27 22:10:02 +02:00
vmpressure.c	mm: vmpressure: fix sending wrong events on underflow	2019-07-27 21:43:56 +02:00
vmscan.c	mm: convert some level-less printks to pr_*	2019-07-27 22:08:13 +02:00
vmstat.c	Revert "lowmemorykiller: Don't count swap cache pages twice"	2019-07-27 22:09:45 +02:00
zbud.c	Import latest Samsung release	2017-04-18 03:43:52 +02:00
zpool.c	Import latest Samsung release	2017-04-18 03:43:52 +02:00
zsmalloc.c	Import latest Samsung release	2017-04-18 03:43:52 +02:00
zswap.c	Import latest Samsung release	2017-04-18 03:43:52 +02:00