linux-hardening - Re: UBSAN: array-index-out-of-bounds

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <5d144d3a-d02d-4c7b-9360-29aea0705137@embeddedor.com>
Date: Tue, 23 Dec 2025 11:15:52 +0900
From: "Gustavo A. R. Silva" <gustavo@...eddedor.com>
To: Kees Cook <kees@...nel.org>, Randy Dunlap <rdunlap@...radead.org>
Cc: kasan-dev@...glegroups.com, linux-hardening@...r.kernel.org
Subject: Re: UBSAN: array-index-out-of-bounds

On 12/23/25 08:28, Kees Cook wrote:
> On Fri, Dec 19, 2025 at 08:20:13PM -0800, Randy Dunlap wrote:
>>
>> from kernel bugzilla:
>> https://bugzilla.kernel.org/show_bug.cgi?id=220823
>>
>>
>> Dec 15 22:01:52 orpheus kernel: UBSAN: array-index-out-of-bounds in /var/tmp/portage/sys-kernel/gentoo-kernel-6.18.1/work/linux-6.18/drivers/mtd/devices/mtd_intel_dg.c:750:15
>>
>>
>> (from drivers/mtd/devices/mtd_intel_dg.c:)
>>
>> 	nvm = kzalloc(struct_size(nvm, regions, nregions), GFP_KERNEL);
> 
> Yes, this needs to be immediately followed with:
> 
> 	nvm->nregions = nregions;
> 

I submitted a fix for this that day:

https://lore.kernel.org/linux-hardening/aUZFLezigzZQVt55@kspp/

It seems someone had submitted a patch in Nov, but it was
never applied upstream.

-Gustavo