linux-hardening - Re: [REGRESSION][BISECTED] erroneous buffer overflow detected in bch2_xattr

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <aBOlREPsG6LQqBVy@archlinux>
Date: Thu, 1 May 2025 18:45:56 +0200
From: Jan Hendrik Farr <kernel@...rr.cc>
To: Alan Huang <mmpgouride@...il.com>
Cc: kent.overstreet@...ux.dev, Thorsten Blum <thorsten.blum@...lux.com>,
	Miguel Ojeda <miguel.ojeda.sandonis@...il.com>,
	Nathan Chancellor <nathan@...nel.org>,
	Bill Wendling <morbo@...gle.com>, Kees Cook <kees@...nel.org>,
	regressions@...ts.linux.dev, linux-bcachefs@...r.kernel.org,
	linux-hardening@...r.kernel.org,
	LKML <linux-kernel@...r.kernel.org>, ardb@...nel.org,
	ojeda@...nel.org
Subject: Re: [REGRESSION][BISECTED] erroneous buffer overflow detected in
 bch2_xattr_validate

> 
> Hello, 
> 
> Now there are users using gcc 15.1.1 came across the similar issue (they are fine with gcc 14.2.1 ):
> 
> 	https://privatebin.net/?a0d4e97d590d71e1#9bLmp2Kb5NU6X6cZEucchDcu88HzUQwHUah8okKPReEt

Just to confirm. Is this kernel built from the linux-mainline AUR
package? 

And gcc version 15.1.1+r7+gf36ec88aa85a-1 from the normal arch
linux repo?

Is bcachefs the rootfs and this happens during boot?

Best Regards
Jan