linux-kernel - [GIT PULL] Binder driver fixes for 6.19-final

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <aYcdUltjnufW5zv7@kroah.com>
Date: Sat, 7 Feb 2026 12:09:06 +0100
From: Greg KH <gregkh@...uxfoundation.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Andrew Morton <akpm@...ux-foundation.org>,
	Arnd Bergmann <arnd@...db.de>, linux-kernel@...r.kernel.org
Subject: [GIT PULL] Binder driver fixes for 6.19-final

The following changes since commit 63804fed149a6750ffd28610c5c1c98cce6bd377:

  Linux 6.19-rc7 (2026-01-25 14:11:24 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git tags/char-misc-6.19-final

for you to fetch changes up to ec4ddc90d201d09ef4e4bef8a2c6d9624525ad68:

  binderfs: fix ida_alloc_max() upper bound (2026-02-03 12:59:07 +0100)

----------------------------------------------------------------
Binder fixes for 6.19-final

Here are some small, last-minute binder C and Rust driver fixes for
reported issues.  They include a number of fixes for reported crashes
and other problems.

All of these have been in linux-next this week, and longer.

Signed-off-by: Greg Kroah-Hartman <gregkh@...uxfoundation.org>

----------------------------------------------------------------
Alice Ryhl (2):
      rust_binder: correctly handle FDA objects of length zero
      rust_binder: add additional alignment checks

Carlos Llamas (4):
      binder: fix UAF in binder_netlink_report()
      binder: fix BR_FROZEN_REPLY error log
      rust_binderfs: fix ida_alloc_max() upper bound
      binderfs: fix ida_alloc_max() upper bound

 drivers/android/binder.c               |  19 +++++-
 drivers/android/binder/rust_binderfs.c |   8 +--
 drivers/android/binder/thread.rs       | 109 +++++++++++++++++++++------------
 drivers/android/binderfs.c             |   8 +--
 4 files changed, 94 insertions(+), 50 deletions(-)