Re: (subset) [PATCH v2 0/6] Fixes multiple sysctl bound checks
"Martin K. Petersen" <[email protected]>
| Newsgroups | gmane.linux.drivers.rdma,gmane.linux.kernel,gmane.linux.scsi,gmane.comp.file-systems.coda.general,gmane.linux.nfs |
|---|---|
| Message-ID | <[email protected]> |
On Mon, 24 Feb 2025 10:58:15 +0100, [email protected] wrote: > This patchset adds some bound checks to sysctls to avoid negative > value writes. > > The patched sysctls were storing the result of the proc_dointvec > proc_handler into an unsigned int data. proc_dointvec being able to > parse negative value, and it return value being a signed int, this could > lead to undefined behaviors. > This has led to kernel crash in the past as described in commit > 3b3376f222e3 ("sysctl.c: fix underflow value setting risk in vm_table") > > [...] Applied to 6.15/scsi-queue, thanks! [4/6] sysctl: Fixes scsi_logging_level bounds https://git.kernel.org/mkp/scsi/c/2cef5b4472c6 -- Martin K. Petersen Oracle Linux Engineering