linux-kernel - [GIT PULL] hardening fixes for v6.15-rc3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202504181303.EBF4F5594@keescook>
Date: Fri, 18 Apr 2025 13:05:07 -0700
From: Kees Cook <kees@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org, Andrey Konovalov <andreyknvl@...il.com>,
	Arnd Bergmann <arnd@...db.de>,
	Catalin Marinas <catalin.marinas@....com>,
	Geert Uytterhoeven <geert@...ux-m68k.org>,
	Kees Cook <kees@...nel.org>, Mark Brown <broonie@...nel.org>,
	Mostafa Saleh <smostafa@...gle.com>,
	Nathan Chancellor <nathan@...nel.org>,
	Peter Collingbourne <pcc@...gle.com>,
	Tamir Duberstein <tamird@...il.com>,
	Vincenzo Frascino <vincenzo.frascino@....com>,
	Will Deacon <will@...nel.org>
Subject: [GIT PULL] hardening fixes for v6.15-rc3

Hi Linus,

Please pull this collection of various hardening fixes for v6.15-rc3.
The one "out of place" patch here is for the prime numbers self test,
but I took that since I had carried the lib/ -> lib/tests/ move tree
this cycle.

Thanks!

-Kees

The following changes since commit 8ffd015db85fea3e15a77027fda6c02ced4d2444:

  Linux 6.15-rc2 (2025-04-13 11:54:49 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.15-rc3

for you to fetch changes up to 3f2925174f8bd811f9399cb4049f6b75fd2fba91:

  lib/prime_numbers: KUnit test should not select PRIME_NUMBERS (2025-04-15 13:50:43 -0700)

----------------------------------------------------------------
hardening fixes for v6.15-rc3

- lib/prime_numbers: KUnit test should not select PRIME_NUMBERS
  (Geert Uytterhoeven)

- ubsan: Fix panic from test_ubsan_out_of_bounds (Mostafa Saleh)

- ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP (Nathan Chancellor)

- string: Add load_unaligned_zeropad() code path to sized_strscpy()
  (Peter Collingbourne)

- kasan: Add strscpy() test to trigger tag fault on arm64 (Vincenzo
  Frascino)

- Disable GCC randstruct for COMPILE_TEST

----------------------------------------------------------------
Geert Uytterhoeven (1):
      lib/prime_numbers: KUnit test should not select PRIME_NUMBERS

Kees Cook (1):
      hardening: Disable GCC randstruct for COMPILE_TEST

Mostafa Saleh (1):
      ubsan: Fix panic from test_ubsan_out_of_bounds

Nathan Chancellor (1):
      lib/Kconfig.ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP

Peter Collingbourne (1):
      string: Add load_unaligned_zeropad() code path to sized_strscpy()

Vincenzo Frascino (1):
      kasan: Add strscpy() test to trigger tag fault on arm64

 lib/Kconfig.debug                  |  2 +-
 lib/Kconfig.ubsan                  |  1 -
 lib/string.c                       | 13 ++++++++++---
 lib/test_ubsan.c                   | 18 +++++++++++-------
 mm/kasan/kasan_test_c.c            | 20 ++++++++++++++++++++
 security/Kconfig.hardening         |  2 +-
 tools/testing/selftests/lib/config |  1 +
 7 files changed, 44 insertions(+), 13 deletions(-)

-- 
Kees Cook