linux-kernel - Re: [PATCH v3 bpf-next 0/2] bpf: Fix OOB read and add tests for load-acquire/store-release

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: 
 <174265023729.2819850.2406782216092782664.git-patchwork-notify@kernel.org>
Date: Sat, 22 Mar 2025 13:30:37 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Kohei Enju <enjuk@...zon.com>
Cc: bpf@...r.kernel.org, linux-kernel@...r.kernel.org, ast@...nel.org,
 daniel@...earbox.net, john.fastabend@...il.com, andrii@...nel.org,
 martin.lau@...ux.dev, eddyz87@...il.com, song@...nel.org,
 yonghong.song@...ux.dev, kpsingh@...nel.org, sdf@...ichev.me,
 haoluo@...gle.com, jolsa@...nel.org, yepeilin@...gle.com, iii@...ux.ibm.com,
 kuniyu@...zon.com, kohei.enju@...il.com,
 syzbot+a5964227adc0f904549c@...kaller.appspotmail.com
Subject: Re: [PATCH v3 bpf-next 0/2] bpf: Fix OOB read and add tests for
 load-acquire/store-release

Hello:

This series was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <ast@...nel.org>:

On Sat, 22 Mar 2025 13:52:54 +0900 you wrote:
> This patch series addresses an out-of-bounds read issue in
> check_atomic_load/store() reported by syzkaller when an invalid register
> number (MAX_BPF_REG or greater) is used.
> 
> The first patch fixes the actual bug by changing the order of validity
> checks, ensuring register validity is checked before atomic_ptr_type_ok()
> is called.
> It also updates some tests that were assuming the previous order of checks.
> 
> [...]

Here is the summary with links:
  - [v3,bpf-next,1/2] bpf: Fix out-of-bounds read in check_atomic_load/store()
    https://git.kernel.org/bpf/bpf-next/c/c03bb2fa327e
  - [v3,bpf-next,2/2] selftests/bpf: Add selftests for load-acquire/store-release when register number is invalid
    https://git.kernel.org/bpf/bpf-next/c/5f3077d7fcd4

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html