linux-kernel - Re: [PATCH 2/2] riscv: Sanitize syscall table indexing under speculation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <e41be7b8-5c39-a41f-e194-7cfc595b3f76@kernel.org>
Date: Tue, 30 Dec 2025 20:01:20 -0700 (MST)
From: Paul Walmsley <pjw@...nel.org>
To: Lukas Gerlach <lukas.gerlach@...pa.de>
cc: linux-riscv@...ts.infradead.org, palmer@...belt.com, pjw@...nel.org, 
    aou@...s.berkeley.edu, alex@...ti.fr, linux-kernel@...r.kernel.org, 
    daniel.weber@...pa.de, michael.schwarz@...pa.de, marton.bognar@...euven.be, 
    jo.vanbulck@...euven.be
Subject: Re: [PATCH 2/2] riscv: Sanitize syscall table indexing under
 speculation

On Thu, 18 Dec 2025, Lukas Gerlach wrote:

> The syscall number is a user-controlled value used to index into the
> syscall table. Use array_index_nospec() to clamp this value after the
> bounds check to prevent speculative out-of-bounds access and subsequent
> data leakage via cache side channels.
> 
> Signed-off-by: Lukas Gerlach <lukas.gerlach@...pa.de>

Thanks, queued for v6.19-rc.


- Paul