linux-kernel - [GIT PULL] hardening fixes for v6.18-rc5

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202511061151.CB031555D@keescook>
Date: Thu, 6 Nov 2025 11:52:58 -0800
From: Kees Cook <kees@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org,
	Aleksandr Loktionov <aleksandr.loktionov@...el.com>,
	Alexander Lobakin <aleksander.lobakin@...el.com>,
	Kees Cook <kees@...nel.org>, Nathan Chancellor <nathan@...nel.org>
Subject: [GIT PULL] hardening fixes for v6.18-rc5

Hi Linus,

Please pull these hardening fixes for v6.18-rc5. This is a work-around
for a (now fixed) corner case in the arm32 build with Clang KCFI
enabled.

Thanks!

-Kees

The following changes since commit 211ddde0823f1442e4ad052a2f30f050145ccada:

  Linux 6.18-rc2 (2025-10-19 15:19:16 -1000)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.18-rc5

for you to fetch changes up to c57f5fee54dfc83ee1d7f70f7beb9410b8466e9e:

  libeth: xdp: Disable generic kCFI pass for libeth_xdp_tx_xmit_bulk() (2025-10-29 20:04:55 -0700)

----------------------------------------------------------------
hardening fixes for v6.18-rc5

- Introduce __nocfi_generic for arm32 Clang (Nathan Chancellor)

----------------------------------------------------------------
Nathan Chancellor (3):
      compiler_types: Introduce __nocfi_generic
      ARM: Select ARCH_USES_CFI_GENERIC_LLVM_PASS
      libeth: xdp: Disable generic kCFI pass for libeth_xdp_tx_xmit_bulk()

 arch/Kconfig                   | 7 +++++++
 arch/arm/Kconfig               | 2 ++
 include/linux/compiler_types.h | 6 ++++++
 include/net/libeth/xdp.h       | 2 +-
 4 files changed, 16 insertions(+), 1 deletion(-)

-- 
Kees Cook