]> Gentwo Git Trees - linux/.git/commit
ring buffer: Propagate __rb_map_vma return value to caller
authorAnkit Khushwaha <ankitkhushwaha.linux@gmail.com>
Wed, 8 Oct 2025 17:25:16 +0000 (22:55 +0530)
committerSteven Rostedt (Google) <rostedt@goodmis.org>
Thu, 9 Oct 2025 01:48:58 +0000 (21:48 -0400)
commitde4cbd704731778a2dc833ce5a24b38e5d672c05
treefb644a9a8e60d01a860da4229aff405b5d483da0
parentc834a97962c708ff5bb8582ca76b0e1225feb675
ring buffer: Propagate __rb_map_vma return value to caller

The return value from `__rb_map_vma()`, which rejects writable or
executable mappings (VM_WRITE, VM_EXEC, or !VM_MAYSHARE), was being
ignored. As a result the caller of `__rb_map_vma` always returned 0
even when the mapping had actually failed, allowing it to proceed
with an invalid VMA.

Cc: stable@vger.kernel.org
Cc: Masami Hiramatsu <mhiramat@kernel.org>
Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
Link: https://lore.kernel.org/20251008172516.20697-1-ankitkhushwaha.linux@gmail.com
Fixes: 117c39200d9d7 ("ring-buffer: Introducing ring-buffer mapping functions")
Reported-by: syzbot+ddc001b92c083dbf2b97@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?id=194151be8eaebd826005329b2e123aecae714bdb
Signed-off-by: Ankit Khushwaha <ankitkhushwaha.linux@gmail.com>
Signed-off-by: Steven Rostedt (Google) <rostedt@goodmis.org>
kernel/trace/ring_buffer.c