linux-kernel - Re: [PATCH 1/3] x86: fix access_ok() and valid_user_address() using wrong USER_PTR

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20251105113754.GBaQs3Egxd9tC4xUg8@fat_crate.local>
Date: Wed, 5 Nov 2025 12:37:54 +0100
From: Borislav Petkov <bp@...en8.de>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Mateusz Guzik <mjguzik@...il.com>,
	the arch/x86 maintainers <x86@...nel.org>, brauner@...nel.org,
	viro@...iv.linux.org.uk, jack@...e.cz, linux-kernel@...r.kernel.org,
	linux-fsdevel@...r.kernel.org, tglx@...utronix.de, pfalcato@...e.de
Subject: Re: [PATCH 1/3] x86: fix access_ok() and valid_user_address() using
 wrong USER_PTR_MAX in modules

On Wed, Nov 05, 2025 at 10:50:21AM +0900, Linus Torvalds wrote:
> I pushed it out with a proper commit message etc. It might not be an
> acute bug right now, but I do want it fixed in 6.18, so that when
> Thomas' new scoped accessors get merged - and maybe cause the whole
> inlining pattern to be much more commonly used - this is all behind
> us.

Right.
 
> And the patch certainly _looks_ ObviouslyCorrect(tm). Famous last words.

Yeah, and we are testing the lineup in the coming weeks on a lot of hw so if
anything fires, we will catch it. So we should be good.

Thx.

-- 
Regards/Gruss,
    Boris.

https://people.kernel.org/tglx/notes-about-netiquette