Sean Christopherson 76021e96d7 KVM: Protect vcpu->pid dereference via debugfs with RCU ... Wrap the vcpu->pid dereference in the debugfs hook vcpu_get_pid() with proper RCU read (un)lock. Unlike the code in kvm_vcpu_ioctl(), vcpu_get_pid() is not a simple access; the pid pointer is passed to pid_nr() and fully dereferenced if the pointer is non-NULL. Failure to acquire RCU could result in use-after-free of the old pid if a different task invokes KVM_RUN and puts the last reference to the old vcpu->pid between vcpu_get_pid() reading the pointer and dereferencing it in pid_nr(). Fixes: e36de87d34 ("KVM: debugfs: expose pid of vcpu threads") Link: https://lore.kernel.org/r/20230211010719.982919-1-seanjc@google.com Signed-off-by: Sean Christopherson <seanjc@google.com>		2023-05-26 11:23:50 -07:00
..
async_pf.c	KVM: Add helpers to wake/query blocking vCPU	2021-12-08 04:24:54 -05:00
async_pf.h
binary_stats.c	KVM: stats: remove dead stores	2021-08-13 03:35:15 -04:00
coalesced_mmio.c	KVM: Destroy target device if coalesced MMIO unregistration fails	2023-02-01 11:25:05 -08:00
coalesced_mmio.h
dirty_ring.c	KVM: Support dirty ring in conjunction with bitmap	2022-11-10 13:11:58 +00:00
eventfd.c	KVM: x86/ioapic: Resample the pending state of an IRQ when unmasking	2023-03-27 10:13:28 -04:00
irqchip.c	KVM: replace direct irq.h inclusion	2022-11-09 12:31:37 -05:00
Kconfig	KVM: Opt out of generic hardware enabling on s390 and PPC	2022-12-29 15:48:37 -05:00
kvm_main.c	KVM: Protect vcpu->pid dereference via debugfs with RCU	2023-05-26 11:23:50 -07:00
kvm_mm.h	kvm: Remove the unused macro KVM_MMU_READ_{,UN}LOCK()	2022-12-27 06:00:51 -05:00
Makefile.kvm	KVM: Reinstate gfn_to_pfn_cache with invalidation support	2022-01-07 10:44:44 -05:00
pfncache.c	KVM: Skip unnecessary "unmap" if gpc is already valid during refresh	2022-11-30 19:25:24 +00:00
vfio.c	kvm/vfio: Fix potential deadlock on vfio group_lock	2023-01-20 08:50:05 -07:00
vfio.h