linux-kernel - [GIT PULL] hardening fixes for v6.11-rc4

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202408151107.18E1DC8CE4@keescook>
Date: Thu, 15 Aug 2024 11:08:30 -0700
From: Kees Cook <kees@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org, David Gow <davidgow@...gle.com>,
	Ivan Orlov <ivan.orlov0322@...il.com>, Kees Cook <kees@...nel.org>,
	Luis Chamberlain <mcgrof@...nel.org>,
	Masami Hiramatsu <mhiramat@...nel.org>,
	Peter Zijlstra <peterz@...radead.org>,
	Petr Mladek <pmladek@...e.com>, Petr Pavlu <petr.pavlu@...e.com>,
	Sami Tolvanen <samitolvanen@...gle.com>, Song Liu <song@...nel.org>,
	Thorsten Blum <thorsten.blum@...lux.com>
Subject: [GIT PULL] hardening fixes for v6.11-rc4

Hi Linus,

Please pull these various hardening fixes for v6.11-rc4.

Thanks!

-Kees

The following changes since commit de9c2c66ad8e787abec7c9d7eff4f8c3cdd28aed:

  Linux 6.11-rc2 (2024-08-04 13:50:53 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.11-rc4

for you to fetch changes up to fb6a421fb6153d97cf3058f9bd550b377b76a490:

  kallsyms: Match symbols exactly with CONFIG_LTO_CLANG (2024-08-15 09:33:35 -0700)

----------------------------------------------------------------
hardening fixes for v6.11-rc4

- gcc-plugins: randstruct: Remove GCC 4.7 or newer requirement
  (Thorsten Blum)

- kallsyms: Clean up interaction with LTO suffixes (Song Liu)

- refcount: Report UAF for refcount_sub_and_test(0) when counter==0
  (Petr Pavlu)

- kunit/overflow: Avoid misallocation of driver name (Ivan Orlov)

----------------------------------------------------------------
Ivan Orlov (1):
      kunit/overflow: Fix UB in overflow_allocation_test

Petr Pavlu (1):
      refcount: Report UAF for refcount_sub_and_test(0) when counter==0

Song Liu (2):
      kallsyms: Do not cleanup .llvm.<hash> suffix before sorting symbols
      kallsyms: Match symbols exactly with CONFIG_LTO_CLANG

Thorsten Blum (1):
      gcc-plugins: randstruct: Remove GCC 4.7 or newer requirement

 drivers/misc/lkdtm/refcount.c                 | 16 ++++++++
 include/linux/refcount.h                      |  4 +-
 kernel/kallsyms.c                             | 55 +++------------------------
 kernel/kallsyms_selftest.c                    | 22 +----------
 lib/overflow_kunit.c                          |  3 +-
 scripts/gcc-plugins/randomize_layout_plugin.c |  4 --
 scripts/kallsyms.c                            | 31 +--------------
 scripts/link-vmlinux.sh                       |  4 --
 8 files changed, 28 insertions(+), 111 deletions(-)

-- 
Kees Cook