linux-kernel - [GIT PULL] hardening fixes for v5.19-rc3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202206151405.D8EDB70EA@keescook>
Date:   Wed, 15 Jun 2022 14:07:05 -0700
From:   Kees Cook <keescook@...omium.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-kernel@...r.kernel.org, Kees Cook <keescook@...omium.org>,
        Matthew Wilcox <willy@...radead.org>,
        Sami Tolvanen <samitolvanen@...gle.com>,
        Uladzislau Rezki <urezki@...il.com>,
        Zorro Lang <zlang@...hat.com>,
        Nathan Chancellor <nathan@...nel.org>
Subject: [GIT PULL] hardening fixes for v5.19-rc3

Hi Linus,

Please pull these kernel hardening fixes for v5.19-rc3.

Thanks!

-Kees

The following changes since commit b13baccc3850ca8b8cccbf8ed9912dbaa0fdf7f3:

  Linux 5.19-rc2 (2022-06-12 16:11:37 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v5.19-rc3

for you to fetch changes up to 1dfbe9fcda4afc957f0e371e207ae3cb7e8f3b0e:

  usercopy: Make usercopy resilient against ridiculously large copies (2022-06-13 09:54:52 -0700)

----------------------------------------------------------------
hardening fixes for v5.19-rc3

- Correctly handle vm_map areas in hardened usercopy (Matthew Wilcox)

- Adjust CFI RCU usage to avoid boot splats with cpuidle (Sami Tolvanen)

----------------------------------------------------------------
Matthew Wilcox (Oracle) (3):
      usercopy: Handle vm_map_ram() areas
      usercopy: Cast pointer to an integer once
      usercopy: Make usercopy resilient against ridiculously large copies

Sami Tolvanen (1):
      cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle

 include/linux/vmalloc.h |  1 +
 kernel/cfi.c            | 22 ++++++++++++++++------
 mm/usercopy.c           | 26 ++++++++++++--------------
 mm/vmalloc.c            |  2 +-
 4 files changed, 30 insertions(+), 21 deletions(-)

-- 
Kees Cook