linux-kernel - [PATCH 0/2] arm64: modules: Reject loading of malformed modules

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250919122321.946462-1-abarnas@google.com>
Date: Fri, 19 Sep 2025 12:23:19 +0000
From: "Adrian Barnaś" <abarnas@...gle.com>
To: linux-arm-kernel@...ts.infradead.org, linux-kernel@...r.kernel.org
Cc: "Adrian Barnaś" <abarnas@...gle.com>, Catalin Marinas <catalin.marinas@....com>, 
	Will Deacon <will@...nel.org>, Ard Biesheuvel <ardb@...nel.org>, Dylan Hatch <dylanbhatch@...gle.com>, 
	Mark Rutland <mark.rutland@....com>
Subject: [PATCH 0/2] arm64: modules: Reject loading of malformed modules

Hi,

Here are a couple of patches to reject the loading of malformed modules
on arm64 when the SCS patching is only partially applied or we detect
an alternative callback function used in the module text.

The SCS issue is largely theoretical. The code currently performs
a "dry-run" (which we remove), and leave module code as-is if failed.
However the latter issue was reported to crash the kernel at [1].

Patches based on v6.17-rc1.

Thanks,
Adrian

[1] https://lore.kernel.org/all/20250807072700.348514-1-fanqincui@163.com/

Cc: Catalin Marinas <catalin.marinas@....com>
Cc: Will Deacon <will@...nel.org>
Cc: Ard Biesheuvel <ardb@...nel.org>
Cc: Dylan Hatch <dylanbhatch@...gle.com>
Cc: Mark Rutland <mark.rutland@....com>

Adrian Barnaś (2):
  arch: arm64: Fail module loading if dynamic SCS patching fails
  arch: arm64: Reject modules with internal alternative callbacks

 arch/arm64/include/asm/alternative.h |  4 ++--
 arch/arm64/include/asm/scs.h         |  2 +-
 arch/arm64/kernel/alternative.c      | 15 ++++++++++-----
 arch/arm64/kernel/module.c           | 14 ++++++++++----
 arch/arm64/kernel/pi/map_kernel.c    |  2 +-
 arch/arm64/kernel/pi/patch-scs.c     | 15 +++++++++++----
 arch/arm64/kernel/pi/pi.h            |  2 +-
 7 files changed, 36 insertions(+), 18 deletions(-)

-- 
2.51.0.534.gc79095c0ca-goog