linux-kernel - Re: [PATCH 6.1 0/2] md: fix mddev uaf while iterating all

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <aAkt8WLN1Gb9snv-@eldamar.lan>
Date: Wed, 23 Apr 2025 20:14:09 +0200
From: Salvatore Bonaccorso <carnil@...ian.org>
To: Yu Kuai <yukuai1@...weicloud.com>, gregkh@...uxfoundation.org,
	sashal@...nel.org
Cc: stable@...r.kernel.org, song@...nel.org, linux-raid@...r.kernel.org,
	linux-kernel@...r.kernel.org, yukuai3@...wei.com,
	yi.zhang@...wei.com, yangerkun@...wei.com, johnny.chenyi@...wei.com
Subject: Re: [PATCH 6.1 0/2] md: fix mddev uaf while iterating all_mddevs list

Hi Greg, Sasha, Yu,

On Sat, Apr 19, 2025 at 09:23:01AM +0800, Yu Kuai wrote:
> From: Yu Kuai <yukuai3@...wei.com>
> 
> Hi, Greg
> 
> This is the manual adaptation version for 6.1, for 6.6/6.12 commit
> 8542870237c3 ("md: fix mddev uaf while iterating all_mddevs list") can
> be applied cleanly, can you queue them as well?
> 
> Thanks!
> 
> Yu Kuai (2):
>   md: factor out a helper from mddev_put()
>   md: fix mddev uaf while iterating all_mddevs list
> 
>  drivers/md/md.c | 50 +++++++++++++++++++++++++++++--------------------
>  1 file changed, 30 insertions(+), 20 deletions(-)

I noticed that the change 8542870237c3 was queued for 6.6.y and 6.12.y
and is in the review now, but wonder should we do something more with
6.1.y as this requires this series/manual adaption?

Or will it make for the next round of stable updates in 6.1.y? 

(or did it just felt through the cracks and it is actually fine that I
ping the thread on this question).

Regards,
Salvatore