linux-kernel - Re: double free in alternatives/retpoline

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20250619104935.GE1613376@noisy.programming.kicks-ass.net>
Date: Thu, 19 Jun 2025 12:49:35 +0200
From: Peter Zijlstra <peterz@...radead.org>
To: Mike Rapoport <rppt@...nel.org>
Cc: Dave Airlie <airlied@...il.com>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	LKML <linux-kernel@...r.kernel.org>, Ingo Molnar <mingo@...nel.org>,
	nik.borisov@...e.com, Lukas Bulwahn <lbulwahn@...hat.com>
Subject: Re: double free in alternatives/retpoline

On Thu, Jun 19, 2025 at 11:06:53AM +0300, Mike Rapoport wrote:

> Looking more closely, there is a typo in its_alloc(), it uses CONFIG_MODULE
> to choose an its_array to reallocate while it should have been using
> CONFIG_MODULES.
> 
> Lukas Bulwahn sent a fix for that:
> 
> https://lore.kernel.org/all/20250616100432.22941-1-lukas.bulwahn@redhat.com

Indeed. That fix is currently sitting in tip/x86/urgent and should make
its way to Linus soon.