linux-kernel - [GIT PULL] hardening fixes for v6.9-rc4

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202404100935.3D7CAE6@keescook>
Date: Wed, 10 Apr 2024 09:36:18 -0700
From: Kees Cook <keescook@...omium.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org, Ard Biesheuvel <ardb@...nel.org>,
	Arnd Bergmann <arnd@...db.de>, Kees Cook <keescook@...omium.org>,
	kernel test robot <oliver.sang@...el.com>
Subject: [GIT PULL] hardening fixes for v6.9-rc4

Hi Linus,

Please pull these hardening fixes for v6.9-rc4.

Thanks!

-Kees

The following changes since commit 39cd87c4eb2b893354f3b850f916353f2658ae6f:

  Linux 6.9-rc2 (2024-03-31 14:32:39 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.9-rc4

for you to fetch changes up to 9c573cd313433f6c1f7236fe64b9b743500c1628:

  randomize_kstack: Improve entropy diffusion (2024-04-03 14:45:03 -0700)

----------------------------------------------------------------
hardening fixes for v6.9-rc4

- gcc-plugins/stackleak: Avoid .head.text section (Ard Biesheuvel)

- ubsan: fix unused variable warning in test module (Arnd Bergmann)

- Improve entropy diffusion in randomize_kstack

----------------------------------------------------------------
Ard Biesheuvel (1):
      gcc-plugins/stackleak: Avoid .head.text section

Arnd Bergmann (1):
      ubsan: fix unused variable warning in test module

Kees Cook (1):
      randomize_kstack: Improve entropy diffusion

 include/linux/randomize_kstack.h       | 2 +-
 lib/test_ubsan.c                       | 2 +-
 scripts/gcc-plugins/stackleak_plugin.c | 2 ++
 3 files changed, 4 insertions(+), 2 deletions(-)

-- 
Kees Cook