mirrors/linux
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-04-02 03:30:08 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
cb8d2bdcb8241b66ca4ac4868f20e12cd6881ebc
linux/fs
History
Miklos Szeredi cb8d2bdcb8 fuse: fix race when disposing stale dentries 
In fuse_dentry_tree_work() just before d_dispose_if_unused() the dentry
could get evicted, resulting in UAF.

Move unlocking dentry_hash[i].lock to after the dispose.  To do this,
fuse_dentry_tree_del_node() needs to be moved from fuse_dentry_prune() to
fuse_dentry_release() to prevent an ABBA deadlock.

The lock ordering becomes:

 -> dentry_bucket.lock
    -> dentry.d_lock

Reported-by: Al Viro <viro@zeniv.linux.org.uk>
Closes: https://lore.kernel.org/all/20251206014242.GO1712166@ZenIV/
Fixes: ab84ad5973 ("fuse: new work queue to periodically invalidate expired dentries")
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Link: https://patch.msgid.link/20260114145344.468856-2-mszeredi@redhat.com
Signed-off-by: Christian Brauner <brauner@kernel.org>
2026-01-16 19:15:14 +01:00
..
9p
9p: don't allow delegations to be set on directories
2026-01-12 10:54:47 +01:00
adfs
…
affs
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
afs
Merge tag 'net-next-6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2025-12-03 17:24:33 -08:00
autofs
Merge tag 'vfs-6.19-rc1.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-05 15:52:30 -08:00
befs
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
bfs
Merge tag 'vfs-6.19-rc1.inode' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 09:02:34 -08:00
btrfs
Merge tag 'for-6.19-rc4-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
2026-01-09 07:02:38 -10:00
cachefiles
Merge tag 'vfs-6.19-rc1.directory.locking' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 16:13:46 -08:00
ceph
ceph: don't allow delegations to be set on directories
2026-01-12 10:54:47 +01:00
coda
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
configfs
Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2025-12-05 14:36:21 -08:00
cramfs
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
crypto
Merge tag 'mm-nonmm-stable-2025-12-06-11-14' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-12-06 14:01:20 -08:00
debugfs
debugfs: Fix memleak in debugfs_change_name().
2025-12-19 16:43:40 +01:00
devpts
convert devpts
2025-11-16 01:35:04 -05:00
dlm
net: Convert proto callbacks from sockaddr to sockaddr_unsized
2025-11-04 19:10:33 -08:00
ecryptfs
ecryptfs: Release lower parent dentry after creating dir
2025-12-24 13:58:04 +01:00
efivarfs
Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2025-12-05 14:36:21 -08:00
efs
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
erofs
erofs: fix file-backed mounts no longer working on EROFS partitions
2026-01-10 06:39:20 -10:00
exfat
exfat: fix remount failure in different process environments
2025-12-03 10:00:17 +09:00
exportfs
…
ext2
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
ext4
Merge tag 'ext4_for_linus-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4
2025-12-03 20:37:15 -08:00
f2fs
Merge tag 'f2fs-for-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs
2025-12-09 12:06:20 +09:00
fat
Merge tag 'mm-nonmm-stable-2025-12-11-11-47' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-12-13 20:55:12 +12:00
freevxfs
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
fuse
fuse: fix race when disposing stale dentries
2026-01-16 19:15:14 +01:00
gfs2
gfs2: don't allow delegations to be set on directories
2026-01-12 10:54:47 +01:00
hfs
Merge tag 'hfs-v6.19-tag1' of git://git.kernel.org/pub/scm/linux/kernel/git/vdubeyko/hfs
2025-12-03 20:08:32 -08:00
hfsplus
Merge tag 'hfs-v6.19-tag1' of git://git.kernel.org/pub/scm/linux/kernel/git/vdubeyko/hfs
2025-12-03 20:08:32 -08:00
hostfs
Merge tag 'uml-for-linux-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/uml/linux
2025-12-05 16:30:56 -08:00
hpfs
Merge tag 'vfs-6.19-rc1.fs_header' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 14:18:01 -08:00
hugetlbfs
Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2025-12-05 14:36:21 -08:00
iomap
iomap: wait for batched folios to be stable in __iomap_get_folio
2026-01-14 17:06:02 +01:00
isofs
Merge tag 'vfs-6.19-rc1.inode' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 09:02:34 -08:00
jbd2
jbd2: fix the inconsistency between checksum and data in memory for journal sb
2025-11-26 17:05:47 -05:00
jffs2
treewide: Update email address
2026-01-11 06:09:11 -10:00
jfs
Merge tag 'vfs-6.19-rc1.inode' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 09:02:34 -08:00
kernfs
fs/kernfs: null-ptr deref in simple_xattrs_free()
2025-12-23 16:14:43 +01:00
lockd
Merge tag 'nfsd-6.19-2' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux
2025-12-30 17:56:26 -08:00
minix
Merge tag 'vfs-6.19-rc1.minix' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 15:22:40 -08:00
netfs
netfs: Fix early read unlock of page with EOF in middle
2025-12-24 13:30:24 +01:00
nfs
nfs: properly disallow delegation requests on directories
2026-01-12 10:54:46 +01:00
nfs_common
NFSD: Remove NFSERR_EAGAIN
2026-01-02 13:43:41 -05:00
nfsd
Merge tag 'vfs-6.19-rc5.fixes' of gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs
2026-01-09 05:57:57 -10:00
nilfs2
Merge tag 'mm-nonmm-stable-2025-12-06-11-14' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-12-06 14:01:20 -08:00
nls
fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
2025-12-01 11:58:06 +02:00
notify
Merge tag 'fsnotify_for_v6.19-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs
2025-12-19 07:41:17 +12:00
ntfs3
Merge tag 'mm-stable-2025-12-03-21-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-12-05 13:52:43 -08:00
ocfs2
Merge tag 'mm-nonmm-stable-2025-12-11-11-47' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-12-13 20:55:12 +12:00
omfs
Merge tag 'vfs-6.19-rc1.fs_header' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 14:18:01 -08:00
openpromfs
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
orangefs
Merge tag 'vfs-6.19-rc1.inode' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 09:02:34 -08:00
overlayfs
ovl: pass original credentials, not mounter credentials during create
2025-12-05 16:16:20 -08:00
proc
fs/proc: replace "__auto_type" with "const auto"
2025-12-08 15:32:15 -08:00
pstore
Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2025-12-05 14:36:21 -08:00
qnx4
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
qnx6
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
quota
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
ramfs
Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2025-12-05 14:36:21 -08:00
resctrl
Merge tag 'mm-stable-2025-12-03-21-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-12-05 13:52:43 -08:00
romfs
romfs: check sb_set_blocksize() return value
2026-01-13 09:56:58 +01:00
smb
smb/client: properly disallow delegations on directories
2026-01-12 10:54:47 +01:00
squashfs
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
sysfs
sysfs: attribute_group: enable const variants of is_visible()
2025-11-26 15:16:35 +01:00
tests
…
tracefs
convert tracefs
2025-11-16 01:35:03 -05:00
ubifs
Merge tag 'ubifs-for-linus-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rw/ubifs
2025-12-09 08:50:27 +09:00
udf
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
ufs
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
unicode
…
vboxsf
vboxsf: don't allow delegations to be set on directories
2026-01-12 10:54:47 +01:00
verity
Merge tag 'fsverity-for-linus' of git://git.kernel.org/pub/scm/fs/fsverity/linux
2025-09-29 15:55:20 -07:00
xfs
Merge tag 'vfs-6.19-rc5.fixes' of gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs
2026-01-09 05:57:57 -10:00
zonefs
Merge tag 'vfs-6.19-rc1.inode' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 09:02:34 -08:00
aio.c
aio: use credential guards
2025-11-04 12:36:33 +01:00
anon_inodes.c
anon_inodes: convert to FD_ADD()
2025-11-28 12:42:31 +01:00
attr.c
filelock: add struct delegated_inode
2025-11-12 09:38:34 +01:00
backing-file.c
Merge tag 'kernel-6.19-rc1.cred' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 13:45:41 -08:00
bad_inode.c
…
binfmt_elf_fdpic.c
…
binfmt_elf.c
rseq: Provide and use rseq_set_ids()
2025-11-04 08:33:33 +01:00
binfmt_flat.c
…
binfmt_misc.c
Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2025-12-05 14:36:21 -08:00
binfmt_script.c
…
bpf_fs_kfuncs.c
bpf...d_path(): constify path argument
2025-09-15 21:17:08 -04:00
buffer.c
Merge tag 'vfs-6.19-rc1.folio' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 10:26:38 -08:00
char_dev.c
…
compat_binfmt_elf.c
…
coredump.c
Merge tag 'net-next-6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2025-12-03 17:24:33 -08:00
d_path.c
…
dax.c
Merge tag 'mm-stable-2025-12-03-21-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-12-05 13:52:43 -08:00
dcache.c
Merge tag 'fuse-update-6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse
2025-12-05 15:25:13 -08:00
direct-io.c
…
drop_caches.c
Coccinelle-based conversion to use ->i_state accessors
2025-10-20 20:22:26 +02:00
eventfd.c
eventfd: convert do_eventfd() to FD_PREPARE()
2025-11-28 12:42:31 +01:00
eventpoll.c
eventpoll: convert do_epoll_create() to FD_PREPARE()
2025-11-28 12:42:32 +01:00
exec.c
Merge tag 'core-rseq-2025-11-30' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2025-12-02 08:48:53 -08:00
fcntl.c
vfs: expose delegation support to userland
2025-11-12 09:38:37 +01:00
fhandle.c
fhandle: convert do_handle_open() to FD_ADD()
2025-11-28 12:42:31 +01:00
file_attr.c
Merge tag 'fsnotify_for_v6.19-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs
2025-12-19 07:41:17 +12:00
file_table.c
fs: update comment in init_file()
2025-10-07 12:48:33 +02:00
file.c
Merge tag 'vfs-6.19-rc1.fd_prepare.fs' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 17:32:07 -08:00
filesystems.c
…
fs_context.c
change the calling conventions for vfs_parse_fs_string()
2025-09-04 15:20:51 -04:00
fs_dirent.c
fs: rename fs_types.h to fs_dirent.h
2025-11-05 09:51:30 +01:00
fs_parser.c
…
fs_pin.c
…
fs_struct.c
fs: inline current_umask() and move it to fs_struct.h
2025-11-05 22:51:23 +01:00
fs-writeback.c
writeback: use round_jiffies_relative for dirtytime_work
2026-01-14 17:11:43 +01:00
fsopen.c
fscontext: do not consume log entries when returning -EMSGSIZE
2025-08-11 14:52:41 +02:00
init.c
vfs: make vfs_symlink break delegations on parent dir
2025-11-12 09:38:36 +01:00
inode.c
fs: Describe @isnew parameter in ilookup5_nowait()
2025-12-24 13:33:24 +01:00
internal.h
Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2025-12-05 14:36:21 -08:00
ioctl.c
fs: remove vfs_ioctl export
2025-09-01 13:08:01 +02:00
Kconfig
Merge tag 'mm-stable-2025-10-01-19-00' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-10-02 18:18:33 -07:00
Kconfig.binfmt
binfmt_elf: preserve original ELF e_flags for core dumps
2025-09-03 20:49:32 -07:00
kernel_read_file.c
…
libfs.c
shmem: fix recovery on rename failures
2025-12-16 00:57:29 -05:00
locks.c
Merge tag 'vfs-6.19-rc5.fixes' of gitolite.kernel.org:pub/scm/linux/kernel/git/vfs/vfs
2026-01-09 05:57:57 -10:00
Makefile
fs: rename fs_types.h to fs_dirent.h
2025-11-05 09:51:30 +01:00
mbcache.c
…
mnt_idmapping.c
…
mount.h
fs: use boolean to indicate anonymous mount namespace
2025-11-11 10:01:31 +01:00
mpage.c
mpage: convert do_mpage_readpage() to return void type
2025-09-21 14:22:16 -07:00
namei.c
VFS: fix __start_dirop() kernel-doc warnings
2025-12-24 13:33:24 +01:00
namespace.c
Merge tag 'vfs-6.19-rc1.fd_prepare.fs' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 17:32:07 -08:00
nsfs.c
Merge tag 'vfs-6.19-rc1.fd_prepare.fs' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 17:32:07 -08:00
open.c
Merge tag 'vfs-6.19-rc1.fd_prepare.fs' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 17:32:07 -08:00
pidfs.c
pidfs: protect PIDFD_GET_* ioctls() via ifdef
2026-01-06 23:08:12 +01:00
pipe.c
Merge tag 'sysctl-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/sysctl/sysctl
2025-12-05 11:15:37 -08:00
pnode.c
umount_tree(): take all victims out of propagation graph at once
2025-09-15 21:26:44 -04:00
pnode.h
umount_tree(): take all victims out of propagation graph at once
2025-09-15 21:26:44 -04:00
posix_acl.c
filelock: add struct delegated_inode
2025-11-12 09:38:34 +01:00
proc_namespace.c
…
read_write.c
copy_file_range: limit size if in compat mode
2025-08-15 16:11:47 +02:00
readdir.c
readdir: require opt-in for d_type flags
2026-01-12 10:57:34 +01:00
remap_range.c
…
select.c
select: Convert to scoped user access
2025-11-04 08:28:34 +01:00
seq_file.c
…
signalfd.c
signalfd: convert do_signalfd4() to FD_ADD()
2025-11-28 12:42:32 +01:00
splice.c
fs/splice.c: trivial fix: pipes -> pipe's
2025-11-25 10:11:16 +01:00
stack.c
…
stat.c
constify path argument of vfs_statx_path()
2025-09-15 21:17:07 -04:00
statfs.c
…
super.c
Merge tag 'vfs-6.19-rc1.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-05 15:52:30 -08:00
sync.c
Merge tag 'vfs-6.19-rc1.writeback' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 09:20:51 -08:00
sysctls.c
…
timerfd.c
timerfd: convert timerfd_create() to FD_ADD()
2025-11-28 12:42:32 +01:00
userfaultfd.c
Merge tag 'mm-stable-2025-12-03-21-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-12-05 13:52:43 -08:00
utimes.c
Merge tag 'vfs-6.19-rc1.directory.delegations' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2025-12-01 15:34:41 -08:00
xattr.c
filelock: add struct delegated_inode
2025-11-12 09:38:34 +01:00