lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <CAPhsuW5Y+mTTqNtSAFUq4cw=Y8KmhcEQeHyOMdw45ijHwFsMuA@mail.gmail.com>
Date: Tue, 27 Aug 2024 17:24:09 -0700
From: Song Liu <song@...nel.org>
To: Yu Kuai <yukuai1@...weicloud.com>
Cc: pmenzel@...gen.mpg.de, linux-raid@...r.kernel.org, 
	linux-kernel@...r.kernel.org, yukuai3@...wei.com, yi.zhang@...wei.com, 
	yangerkun@...wei.com
Subject: Re: [PATCH md-6.12 v2] md: remove flush handling

On Tue, Aug 27, 2024 at 4:07 AM Yu Kuai <yukuai1@...weicloud.com> wrote:
>
[...]
>
> Test result: about 10 times faster:
> Before this patch: 50943374 microseconds
> After this patch:  5096347  microseconds
>
> BTW, commit 611d5cbc0b35 ("md: fix deadlock between mddev_suspend and flush
> bio") claims to fix the problem introduced by commit fa2bbff7b0b4 ("md:
> synchronize flush io with array reconfiguration"), which is wrong, the
> problem is actually indroduced by commit 409c57f38017 ("md: enable
> suspend/resume of md devices."), hence older kernels will be affected by
> CVE-2024-43855.
>
> What's worse, the CVE patch can't be backported to older kernels due to
> a lot of relied patches, and this patch can be backported to olders
> kernels to fix the CVE instead.
>
> Signed-off-by: Yu Kuai <yukuai3@...wei.com>

Applied to md-next.

Thanks,
Song

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ