[GIT PULL] s390 updates for 7.2-rc6
Vasily Gorbik <[email protected]> Sun, 2 Aug 2026 16:16:09 +0200
| Newsgroups | org.kernel.vger.linux-s390,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
Hello Linus,
please pull s390 fixes for 7.2-rc6.
Thank you,
Vasily
The following changes since commit 49145bce539117db4b6e9e83c0e5ef528e361050:
s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (2026-07-15 17:35:42 +0200)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux.git tags/s390-7.2-6
for you to fetch changes up to 01476391aecef36a3b789ee844357b22fbc90665:
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() (2026-07-31 13:31:20 +0200)
----------------------------------------------------------------
s390 updates for 7.2-rc6
- Fix PCI MMIO write syscall falsely reporting success for mappings not
valid for MMIO when MIO is unavailable by returning -EFAULT
- Fix CPRB parameter buffer overflows in zcrypt CCA AES cipher and ECC
private key conversion by rejecting oversized key tokens
- Fix buffer overreads and length underflow in pkey and zcrypt CCA token
validation by checking length fields against actual buffer sizes
- Fix out of bounds permission bitmap access in zcrypt EP11 admin CPRB
filtering on custom device nodes by using AP_DOMAINS as the limit
- Fix speculative permission bitmap reads in zcrypt CCA and EP11 admin
CPRB handling by sanitizing user controlled domain indexes
- Fix sensitive key material left in zcrypt CCA clear key import buffers
by scrubbing CPRB and temporary buffers after use
----------------------------------------------------------------
Harald Freudenberger (4):
s390/zcrypt: Fix buffer over-read in cca_cipher2protkey
s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs
s390/zcrypt: Close speculative mem read possibility
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()
Holger Dengler (2):
s390/zcrypt: Validate length for CCA AES cipher key requests
s390/zcrypt: Validate length for CCA ECC private key requests
Niklas Schnelle (1):
s390/pci: Fix s390_pci_mmio_write syscall error return without MIO
arch/s390/pci/pci_mmio.c | 1 +
drivers/s390/crypto/pkey_cca.c | 15 ++----
drivers/s390/crypto/zcrypt_api.c | 4 +-
drivers/s390/crypto/zcrypt_ccamisc.c | 89 +++++++++++++++++++++++++++++-------
drivers/s390/crypto/zcrypt_ccamisc.h | 6 +--
5 files changed, 85 insertions(+), 30 deletions(-)