linux-kernel - Re: [PATCH 6.1.y] drm/amd/display: fixed integer types and null check locations

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <2025030548-spinal-breezy-ef8e@gregkh>
Date: Wed, 5 Mar 2025 13:59:28 +0100
From: Greg KH <gregkh@...uxfoundation.org>
To: jianqi.ren.cn@...driver.com
Cc: stable@...r.kernel.org, patches@...ts.linux.dev,
	alexander.deucher@....com, daniel.wheeler@....com,
	mario.limonciello@....com, josip.pavic@....com,
	aurabindo.pillai@....com, sohaib.nadeem@....com,
	harry.wentland@....com, sunpeng.li@....com,
	Rodrigo.Siqueira@....com, christian.koenig@....com,
	Xinhui.Pan@....com, airlied@...il.com, daniel@...ll.ch,
	wayne.lin@....com, sashal@...nel.org,
	dri-devel@...ts.freedesktop.org, linux-kernel@...r.kernel.org,
	charlene.liu@....com, gabe.teeger@....com,
	amd-gfx@...ts.freedesktop.org, Nicholas.Kazlauskas@....com
Subject: Re: [PATCH 6.1.y] drm/amd/display: fixed integer types and null
 check locations

On Thu, Feb 27, 2025 at 11:26:33AM +0800, jianqi.ren.cn@...driver.com wrote:
> From: Sohaib Nadeem <sohaib.nadeem@....com>
> 
> [ Upstream commit 0484e05d048b66d01d1f3c1d2306010bb57d8738 ]
> 
> [why]:
> issues fixed:
> - comparison with wider integer type in loop condition which can cause
> infinite loops
> - pointer dereference before null check
> 
> Cc: Mario Limonciello <mario.limonciello@....com>
> Cc: Alex Deucher <alexander.deucher@....com>
> Cc: stable@...r.kernel.org
> Reviewed-by: Josip Pavic <josip.pavic@....com>
> Acked-by: Aurabindo Pillai <aurabindo.pillai@....com>
> Signed-off-by: Sohaib Nadeem <sohaib.nadeem@....com>
> Tested-by: Daniel Wheeler <daniel.wheeler@....com>
> Signed-off-by: Alex Deucher <alexander.deucher@....com>
> [ To fix CVE-2024-26767, delete changes made in drivers/gpu/drm/amd/display/dc/link/link_validation.c
>  for this file is deleted in linux-6.1 ]

It's not that the file is deleted, it is just not present yet, as it had
not shown up in the tree.

I've manually edited this changelog, please be more careful next time.
Also, no need to mention a CVE id, they don't mean anything here :)

thanks,

greg k-h