Edward Adam Davis 6921d1e07c tracing: Fix filter logic error ...

If the processing of the tr->events loop fails, the filter that has been
added to filter_head will be released twice in free_filter_list(&head->rcu)
and __free_filter(filter).

After adding the filter of tr->events, add the filter to the filter_head
process to avoid triggering uaf.

Link: https://lore.kernel.org/[email protected]
Fixes: a9d0aab5eb ("tracing: Fix regression of filter waiting a long time on RCU synchronization")
Reported-by: [email protected]
Closes: https://syzkaller.appspot.com/bug?extid=daba72c4af9915e9c894
Tested-by: [email protected]
Acked-by: Masami Hiramatsu (Google) <[email protected]>
Signed-off-by: Edward Adam Davis <[email protected]>
Signed-off-by: Steven Rostedt (Google) <[email protected]>

2025-06-27 15:51:36 -04:00

..

rv

rv: Fix out-of-bound memory access in rv_is_container_monitor()

2025-04-12 12:13:30 -04:00

blktrace.c

traceevent/block: Add REQ_ATOMIC flag to block trace events

2025-05-23 09:18:48 -06:00

bpf_trace.c

bpf: Fix error return value in bpf_copy_from_user_dynptr

2025-05-23 13:25:02 -07:00

bpf_trace.h

…

error_report-traces.c

…

fgraph.c

ftrace: Show subops in enabled_functions

2025-05-08 09:36:08 -04:00

fprobe.c

tracing: fprobe: Fix RCU warning message in list traversal

2025-05-10 08:28:02 +09:00

ftrace_internal.h

…

ftrace.c

Merge tag 'riscv-for-linus-6.16-mw1' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux

2025-06-06 18:05:18 -07:00

Kconfig

ftrace: Have tracing function args depend on PROBE_EVENTS_BTF_ARGS

2025-04-02 09:50:56 -04:00

kprobe_event_gen_test.c

…

Makefile

…

pid_list.c

tracing: Cleanup upper_empty() in pid_list

2025-05-14 11:19:32 -04:00

pid_list.h

…

power-traces.c

…

preemptirq_delay_test.c

…

rethook.c

…

ring_buffer_benchmark.c

…

ring_buffer.c

ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()

2025-06-06 20:25:55 -04:00

rpm-traces.c

…

synth_event_gen_test.c

…

trace_benchmark.c

…

trace_benchmark.h

…

trace_boot.c

…

trace_branch.c

tracing: branch: Use trace_tracing_is_on_cpu() instead of "disabled" field

2025-05-09 15:19:10 -04:00

trace_btf.c

…

trace_btf.h

…

trace_clock.c

…

trace_dynevent.c

tracing: probes: Fix a possible race in trace_probe_log APIs

2025-05-13 22:23:34 +09:00

trace_dynevent.h

tracing: probes: Fix a possible race in trace_probe_log APIs

2025-05-13 22:23:34 +09:00

trace_entries.h

ftrace: Expose call graph depth as unsigned int

2025-05-08 09:36:08 -04:00

trace_eprobe.c

tracing: add missing trace_probe_log_clear for eprobes

2025-05-10 08:44:50 +09:00

trace_event_perf.c

…

trace_events_filter_test.h

…

trace_events_filter.c

tracing: Fix filter logic error

2025-06-27 15:51:36 -04:00

trace_events_hist.c

tracing: Rename event_trigger_alloc() to trigger_data_alloc()

2025-05-09 15:19:11 -04:00

trace_events_inject.c

…

trace_events_synth.c

tracing: Do not add length to print format in synthetic events

2025-04-09 11:34:21 -04:00

trace_events_trigger.c

Merge tag 'trace-v6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-05-29 21:04:36 -07:00

trace_events_user.c

…

trace_events.c

tracing: Add a helper function to handle the dereference arg in verifier

2025-05-09 15:19:11 -04:00

trace_export.c

…

trace_fprobe.c

Merge tag 'probes-fixes-v6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-04-08 12:51:34 -07:00

trace_functions_graph.c

fgraph: Do not enable function_graph tracer when setting funcgraph-args

2025-06-18 07:43:22 -04:00

trace_functions.c

Merge tag 'trace-v6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-05-29 21:04:36 -07:00

trace_hwlat.c

…

trace_irqsoff.c

tracing: Use atomic_inc_return() for updating "disabled" counter in irqsoff tracer

2025-05-09 15:19:10 -04:00

trace_kdb.c

tracing: kdb: Use tracer_tracing_on/off() instead of setting per CPU disabled

2025-05-09 15:18:47 -04:00

trace_kprobe_selftest.c

…

trace_kprobe_selftest.h

…

trace_kprobe.c

tracing: probes: Fix a possible race in trace_probe_log APIs

2025-05-13 22:23:34 +09:00

trace_mmiotrace.c

tracing/mmiotrace: Remove reference to unused per CPU data pointer

2025-05-08 09:36:09 -04:00

trace_nop.c

…

trace_osnoise.c

tracing/osnoise: Allow arbitrarily long CPU string

2025-05-08 09:36:09 -04:00

trace_output.c

tracing: Show preempt and irq events callsites from the offsets in field print

2025-05-06 11:34:52 -04:00

trace_output.h

…

trace_preemptirq.c

…

trace_printk.c

…

trace_probe_kernel.h

…

trace_probe_tmpl.h

…

trace_probe.c

tracing: probes: Fix a possible race in trace_probe_log APIs

2025-05-13 22:23:34 +09:00

trace_probe.h

tracing: probe-events: Log error for exceeding the number of arguments

2025-03-27 21:19:54 +09:00

trace_recursion_record.c

…

trace_sched_switch.c

…

trace_sched_wakeup.c

tracing: Convert the per CPU "disabled" counter to local from atomic

2025-05-09 15:19:10 -04:00

trace_selftest_dynamic.c

…

trace_selftest.c

…

trace_seq.c

…

trace_stack.c

Merge tag 'trace-v6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-05-29 21:04:36 -07:00

trace_stat.c

…

trace_stat.h

…

trace_synth.h

…

trace_syscalls.c

…

trace_uprobe.c

Merge tag 'bpf-next-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next

2025-05-28 15:52:42 -07:00

trace.c

Merge tag 'trace-ringbuffer-v6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-05-30 21:20:11 -07:00

trace.h

tracing: Allow the top level trace_marker to write into another instances

2025-05-09 15:19:11 -04:00

tracing_map.c

…

tracing_map.h

…