linux-kernel - [GIT PULL] execve updates for v6.14-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <202501151607.5E0B12539@keescook>
Date: Wed, 15 Jan 2025 16:09:58 -0800
From: Kees Cook <kees@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org, Aleksa Sarai <cyphar@...har.com>,
	Alexander Viro <viro@...iv.linux.org.uk>,
	Christophe JAILLET <christophe.jaillet@...adoo.fr>,
	Dan Carpenter <dan.carpenter@...aro.org>,
	"Eric W. Biederman" <ebiederm@...ssion.com>,
	Kees Cook <kees@...nel.org>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	Nicolas Pitre <npitre@...libre.com>,
	Nir Lichtman <nir@...htman.org>,
	Tycho Andersen <tandersen@...flix.com>,
	Vegard Nossum <vegard.nossum@...cle.com>,
	Zbigniew Jędrzejewski-Szmek <zbyszek@...waw.pl>
Subject: [GIT PULL] execve updates for v6.14-rc1

Hi Linus,

Please pull these execve updates for v6.14-rc1. This is mostly the pull
request for v6.13-rc1, but with all the "comm" stuff now settled and has
lived in -next for the entire past dev cycle.

Thanks!

-Kees

The following changes since commit 8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b:

  Linux 6.12-rc2 (2024-10-06 15:32:27 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/execve-v6.14-rc1

for you to fetch changes up to 55cf2f4b945f6a6416cc2524ba740b83cc9af25a:

  binfmt_flat: Fix integer overflow bug on 32 bit systems (2025-01-10 08:49:05 -0800)

----------------------------------------------------------------
execve updates for v6.14-rc1

- exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case
  (Tycho Andersen, Kees Cook)

- binfmt_misc: Fix comment typos (Christophe JAILLET)

- exec: move empty argv[0] warning closer to actual logic (Nir Lichtman)

- exec: remove legacy custom binfmt modules autoloading (Nir Lichtman)

- binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter)

- exec: Make sure set_task_comm() always NUL-terminates

- coredump: Do not lock when copying "comm"

- MAINTAINERS: add auxvec.h and set myself as maintainer

----------------------------------------------------------------
Christophe JAILLET (1):
      fs: binfmt: Fix a typo

Dan Carpenter (1):
      binfmt_flat: Fix integer overflow bug on 32 bit systems

Kees Cook (5):
      coredump: Do not lock during 'comm' reporting
      MAINTAINERS: exec: Add auxvec.h UAPI
      MAINTAINERS: exec: Mark Kees as maintainer
      exec: Make sure task->comm is always NUL-terminated
      exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case

Nir Lichtman (1):
      exec: remove legacy custom binfmt modules autoloading

Tycho Andersen (1):
      selftests/exec: add a test for execveat()'s comm

nir@...htman.org (1):
      exec: move warning of null argv to be next to the relevant code

 MAINTAINERS                             |  3 +-
 fs/binfmt_flat.c                        |  2 +-
 fs/binfmt_misc.c                        |  2 +-
 fs/exec.c                               | 63 +++++++++++++++------------
 include/linux/binfmts.h                 |  4 +-
 include/linux/coredump.h                |  4 +-
 include/linux/sched.h                   |  9 ++--
 io_uring/io-wq.c                        |  2 +-
 io_uring/sqpoll.c                       |  2 +-
 kernel/kthread.c                        |  3 +-
 tools/testing/selftests/exec/execveat.c | 75 +++++++++++++++++++++++++++++++--
 11 files changed, 125 insertions(+), 44 deletions(-)

-- 
Kees Cook