Skip to content

Fix null-ptr-deref in bio_integrity_map_user()#751

Open
blktests-ci[bot] wants to merge 1 commit intolinus-master_basefrom
series/1083065=>linus-master
Open

Fix null-ptr-deref in bio_integrity_map_user()#751
blktests-ci[bot] wants to merge 1 commit intolinus-master_basefrom
series/1083065=>linus-master

Conversation

@blktests-ci
Copy link
Copy Markdown

@blktests-ci blktests-ci Bot commented Apr 20, 2026

Pull request for series with
subject: Fix null-ptr-deref in bio_integrity_map_user()
version: 3
url: https://patchwork.kernel.org/project/linux-block/list/?series=1083065

@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented Apr 20, 2026

Upstream branch: d60bc14
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from 6b4d829 to ceec5ed Compare April 21, 2026 06:51
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented Apr 21, 2026

Upstream branch: b4e0758
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from ede150c to 585308e Compare April 21, 2026 07:02
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from ceec5ed to 3b54e52 Compare April 22, 2026 20:20
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented Apr 22, 2026

Upstream branch: 6596a02
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from 585308e to b2615bc Compare April 22, 2026 20:23
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from 3b54e52 to 6a0b974 Compare April 23, 2026 16:58
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented Apr 23, 2026

Upstream branch: 507bd4b
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from b2615bc to dc90171 Compare April 23, 2026 17:01
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from 6a0b974 to 59ca59b Compare April 24, 2026 00:56
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented Apr 24, 2026

Upstream branch: dd6c438
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from dc90171 to 60c3c56 Compare April 24, 2026 00:59
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch 2 times, most recently from 94f0438 to 857ada9 Compare April 24, 2026 07:54
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented Apr 24, 2026

Upstream branch: dd6c438
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from 60c3c56 to 6ef108e Compare April 24, 2026 07:54
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from 857ada9 to 482ce5b Compare April 29, 2026 02:21
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented Apr 29, 2026

Upstream branch: dca922e
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from 6ef108e to f4ab853 Compare April 29, 2026 02:29
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from 482ce5b to 5a9f7c7 Compare April 30, 2026 07:29
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented Apr 30, 2026

Upstream branch: e75a43c
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from f4ab853 to 16f636a Compare April 30, 2026 07:37
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from 5a9f7c7 to 25a041f Compare May 3, 2026 02:07
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented May 3, 2026

Upstream branch: 66edb90
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from 16f636a to bed01e4 Compare May 3, 2026 02:45
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from 25a041f to 6f75bd1 Compare May 4, 2026 10:57
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented May 4, 2026

Upstream branch: 6d35786
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from bed01e4 to c5dbe01 Compare May 4, 2026 11:35
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from 6f75bd1 to 1f0d33a Compare May 5, 2026 15:39
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented May 5, 2026

Upstream branch: 6d35786
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from c5dbe01 to b73d6c9 Compare May 5, 2026 16:07
@blktests-ci blktests-ci Bot force-pushed the linus-master_base branch from 1f0d33a to b1870f6 Compare May 10, 2026 15:59
@swkim101
Fix null-ptr-deref in bio_integrity_map_user()
ffa9a24 
pin_user_pages_fast() can partially succeed and return the number of
pages that were actually pinned. However, the bio_integrity_map_user()
does not handle this partial pinning. This leads to a general protection
fault since bvec_from_pages() dereferences an unpinned page address,
which is 0.

To fix this, add a check to verify that all requested memory is pinned.

Reproducer in blktest: linux-blktests/blktests#244

Kernel Oops:

Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 0 UID: 0 PID: 1061 Comm: nvme-passthroug Not tainted 7.0.0-11783-g90957f9314e8-dirty #16 PREEMPT(lazy)
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014
RIP: 0010:bio_integrity_map_user.cold+0x1b0/0x9d6

Fixes: 492c5d4 ("block: bio-integrity: directly map user buffers")
Acked-by: Chao Shi <cshi008@fiu.edu>
Acked-by: Weidong Zhu <weizhu@fiu.edu>
Acked-by: Dave Tian <daveti@purdue.edu>
Signed-off-by: Sungwoo Kim <iam@sung-woo.kim>
@blktests-ci
Copy link
Copy Markdown
Author

blktests-ci Bot commented May 10, 2026

Upstream branch: aa54b1d
series: https://patchwork.kernel.org/project/linux-block/list/?series=1083065
version: 3

@blktests-ci blktests-ci Bot force-pushed the series/1083065=>linus-master branch from b73d6c9 to ffa9a24 Compare May 10, 2026 16:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

linus-master new V3-ci-pass V3

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@swkim101