src/sys/compat/linux/linux_misc.c, branch releng/14.4FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=releng%2F14.42026-06-29T19:17:30Zcompat/linux: Avoid waitid() kernel stack disclosure2026-06-29T19:17:30ZEd Masteemaste@FreeBSD.org2026-03-10T13:53:46Zurn:sha1:99d936f9858985c6387ef930ab6d66f013203edb
Approved by: so
Security: FreeBSD-SA-26:47.linux
Security: CVE-2026-49424
Reported by: Adam Crosser, Praetorian
Reviewed by: philip
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55812
(cherry picked from commit 9a9f93bcf1aa0059d759b2f3ea6faeb2760a11bd)
(cherry picked from commit 9f8db9cc67fb86eeb2b645ce7f8aa748e99241a9)
(cherry picked from commit a347e6e20e75ad6224afefcf650ef738c3de094d)
execve_block(): a mechanism for mutual exclusion with execve() on the process2026-06-29T19:17:29ZKonstantin Belousovkib@FreeBSD.org2026-05-26T17:36:20Zurn:sha1:8fbbc185a3ff66d95c30d9b9062d6d8a349f0454
(cherry picked from commit e1a84b7708c2514769625c2af6c5034694013b6a)
(cherry picked from commit dc94d15a7136c4cfe3342c005d8a319f0583ed9a)
proc: Allow to make proc_rwmem() operate on a consistent address space
(cherry picked from commit e1b0d051bbf7e4e730470cbd6622f71a639834c3)
(cherry picked from commit e7578e37d832ecf1eee8cd3fed10df0e0cb1aa7e)
kern_proc.c: ensure stability of the vmspace we read the strings from
(cherry picked from commit a22c044cce41864a32af6b8281a3c416a2664d7f)
(cherry picked from commit 1f062247ef4e920e7fdd1ebe91b4600d69fe1e91)
kern_proc.c: ensure stability of the vmspace for sysctl kern.proc.vmmap
(cherry picked from commit 5fe6e08d2db56b530f0df2903ef24cfabab7b8ea)
(cherry picked from commit e856c10a4d6dfe30a730246b2050d9dd438085db)
kern_proc.c: ensure stability of the vmspace for sysctl kern.proc.vm_layout
(cherry picked from commit 31fa677e4af00b795bf671847b4dc72960c90f14)
(cherry picked from commit da1398dd6962b458fdcf25799fcb512f4d9c070d)
kern_proc.c: make kern.proc.osrel atomic
(cherry picked from commit 80626f34ee985671bb8c60ee986b89587b7a1511)
(cherry picked from commit b3f99ce653d456c9c829359b0dc83c4867f044b7)
kern_proc.c: disallow execve around sysctl kern.proc.kstacks
(cherry picked from commit 8b5abd9027b8b1f6290c756730ee3adebed007f4)
(cherry picked from commit 197f367cdda7919578d15b1562225d6db462c5ad)
kern_proc.c: disallow execve around sysctl kern.proc.rlimit
(cherry picked from commit 5a91fa5a7656c99e527fe7e6f6bf6bd9e85ab589)
(cherry picked from commit 35b95beb06cab0b10a7e3a697931851315fe3dc2)
kern_event: block the target process from execing for sysctl kern.proc.kqueue
(cherry picked from commit 79b384bd8fdff4869ce4799edb0342ff5c25b6fa)
(cherry picked from commit adb14791b752cf0f07dce44d840f01340aa6d6cb)
kern_resource.c: disallow execve around sysctl kern.proc.rlimitusage
(cherry picked from commit 836749817036b90b60af0584fa21f2d9dbd60ff7)
(cherry picked from commit 190d6677b11a1deed6bd0ef14fd4f990eea20f5b)
kern_procctl(PROC_WX_MAPPINGS_PERMIT): ensure stability of the target vmspace
(cherry picked from commit 6a572920f251ac8ac6a80a55d4d039736ea7dd65)
(cherry picked from commit 23ebf0c97ac5fcd6adb6cda8a8707b99257721a6)
linux_prlimit(): block execve for the target
(cherry picked from commit e41c28e67fac9cd22a85b160c5c9d0477ed03600)
(cherry picked from commit a11c4f036c1136ba90fbfda5d2025d18116562d8)
pfs_readdir(): block the target process from execing
(cherry picked from commit 4c0a0909f928baac982b7de4bfa5b5ca7de5291a)
(cherry picked from commit caa2e5cf7cfb07c115d143023ffb21546a60556a)
pseudofs: ensure that the target process vmspace is stable for VOP_READ/WRITE
(cherry picked from commit a4993bac41350e85bc9affb862d2974a1a09bb5e)
(cherry picked from commit ec0d7d01d6c45eff4043cf178addf65d1933d62a)
procfs, linprocfs: ensure target process vmspace stability
(cherry picked from commit 5db31f1b47b586a5091eb41fc957236f28b78dba)
(cherry picked from commit d7d5337291c983ba969e24c95df0bcab46b44621)
sys_set*id(9): wait for the execblocks to pass
(cherry picked from commit d0384f50dad25d3358d76f7556969ea1d515ba68)
(cherry picked from commit 34b95f53e7ac3a055b3d866d101a79e85d0022c4)
kern_exec.c: explicitly include sys/limits.h for UINT_MAX
(cherry picked from commit f5fce0bcc370a9700249e64901eabf2e0be4ecb0)
(cherry picked from commit bb1154f3ea20291b0c02821743084a6f1a7dd844)
Approved by: so
Security: FreeBSD-SA-26:39.execve
Security: CVE-2026-49415
linux: setgroups(): Avoid allocation under the process lock2025-10-10T17:15:56ZOlivier Certnerolce@FreeBSD.org2025-08-28T15:47:38Zurn:sha1:216460b806742c8c0a97aec2c9a689a17c564beb
This was missed in commit 838d9858251e ("Rework the credential code to
support larger values of NGROUPS (...)").
No functional change (intended).
MFC after: 5 days
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D52278
(cherry picked from commit b7a87d7c0dd19016e82f5d33f2c5ec90479c31fe)
exec: Remove parameter 'segflg' from exec_copyin_args()2025-05-06T14:15:38ZWuyang Chungwy-chung@outlook.com2025-02-05T06:54:54Zurn:sha1:773ef40696c6335a1ed8ffaa6401777ac0ce716d
In kern "copyin" means copy data from user address space to kernel
address space. But in the function exec_copyin_args() there is a
parameter 'segflg' that is used to specify the address space of the
parameter 'fname'. In the source code there are two places where
'segflg' are not UIO_USERSPACE. In both cases the 'fname' argument are
NULL so the argument 'segflg' are not important there. So it is safe to
remove the parameter 'segflg' from the function exec_copyin_args().
Reviewed by: markj, jhb
MFC after: 2 weeks
Pull Request: https://github.com/freebsd/freebsd-src/pull/1590
(cherry picked from commit 15581af7c2d30360313dcad74dc5dc83c02f9df0)
linux(4): Deorbit linux_nosys2023-10-10T05:12:12ZDmitry Chagindchagin@FreeBSD.org2023-10-03T07:38:03Zurn:sha1:ce693de706fca8218e59705f609efed52d8e3623
Differential Revision: https://reviews.freebsd.org/D41901
MFC after: 1 week
(cherry picked from commit 199e397e9bf1076ae905e2742ef8e294870f5b27)
linux(4): Deduplicate mmap22023-09-12T07:48:56ZDmitry Chagindchagin@FreeBSD.org2023-09-05T18:16:39Zurn:sha1:a321b17b8e6deb83249b685357631dfd8fafc9e8
To help porting the Linux emulation layer to a new platforms start using
Linux names for conditional builds instead of architecture-specific ifdefs.
MFC after: 1 week
(cherry picked from commit 2a1cf1b6b55c8326bbe85d0fdf17b0f2fb9b34ce)
linux(4): Deduplicate mprotect, madvise2023-09-12T07:48:39ZDmitry Chagindchagin@FreeBSD.org2023-09-05T18:15:52Zurn:sha1:4d17239617439b9a500f4c7a59f5f4d323d252b7
MFC after: 1 week
(cherry picked from commit 553b1a4e4eb426d2c29a033b284c13bfbab30334)
linux(4): Remove sys/cdefs.h inclusion where it's not needed due to 685dc7432023-08-18T10:12:02ZDmitry Chagindchagin@FreeBSD.org2023-08-18T10:12:02Zurn:sha1:3460fab5fced39c7ea597cc7de0ebc3e4c88989asys: Remove $FreeBSD$: one-line .c pattern2023-08-16T17:54:36ZWarner Loshimp@FreeBSD.org2023-08-16T17:54:36Zurn:sha1:685dc743dc3b5645e34836464128e1c0558b404b
Remove /^[\s*]*__FBSDID\("\$FreeBSD\$"\);?\s*\n/
linux(4): Add a dedicated ioprio system calls2023-08-04T13:03:57ZDmitry Chagindchagin@FreeBSD.org2023-08-04T13:03:57Zurn:sha1:bbe017e0415a60114036f2315605ff6881ed9c46
On Linux these system calls have an effect only when used in conjuction
with an I/O scheduler that supports I/O priorities. If no I/O scheduler
has been set for a thread, then by defaut the I/O priority will follow
the CPU nice value. Due to FreeBSD lack of I/O scheduler facilities, the
default Linux behavior is implemented.
Ubuntu 23.04 debootstrap requires Linux ionice which depends on these
syscalls.
Differential Revision: https://reviews.freebsd.org/D41153
MFC after: 1 month