io_uring: don't assume mm is constant across submits
authorJens Axboe <axboe@kernel.dk>
Tue, 29 Dec 2020 17:50:46 +0000 (10:50 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 6 Jan 2021 13:56:50 +0000 (14:56 +0100)
commit7247bc60e8e1458d89ea53179fce02d2307aac7f
treea0632f0b41c708bd2aea595485923a3697f4ed8e
parenta5184f3cc284e51043981b5d7789468be49e6a0b
io_uring: don't assume mm is constant across submits

commit 77788775c7132a8d93c6930ab1bd84fc743c7cb7 upstream.

If we COW the identity, we assume that ->mm never changes. But this
isn't true of multiple processes end up sharing the ring. Hence treat
id->mm like like any other process compontent when it comes to the
identity mapping. This is pretty trivial, just moving the existing grab
into io_grab_identity(), and including a check for the match.

Cc: stable@vger.kernel.org # 5.10
Fixes: 1e6fa5216a0e ("io_uring: COW io_identity on mismatch")
Reported-by: Christian Brauner <christian.brauner@ubuntu.com>:
Tested-by: Christian Brauner <christian.brauner@ubuntu.com>:
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/io_uring.c