[GIT PULL] s390 updates for 7.2-rc7

Vasily Gorbik <[email protected]>
Newsgroups org.kernel.vger.linux-s390,org.kernel.vger.linux-kernel
Message-ID <[email protected]>
Hello Linus,

please pull s390 fixes for 7.2-rc7.

Thank you,
Vasily

The following changes since commit 01476391aecef36a3b789ee844357b22fbc90665:

  s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() (2026-07-31 13:31:20 +0200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux.git tags/s390-7.2-7

for you to fetch changes up to eb363254472493e3458156fc11fd56dca92f4333:

  s390/zcrypt: Pad trailing CCA or EP11 message with zeros (2026-08-05 15:12:22 +0200)

----------------------------------------------------------------
s390 updates for 7.2-rc7

- Fix potential uninitialized memory reads and buffer overflows from
  malformed zcrypt CCA and EP11 requests by properly validating lengths
  and payloads

- Fix possible out of bounds accesses in zcrypt EP11 domain handling by
  replacing fixed payload layout assumptions with parsing ASN.1 fields
  with bounds checks

- Fix zcrypt CCA and EP11 request and reply buffer allocations missing
  required 4-byte padding, and scrub the full allocation on release

- Fix zcrypt CCA and EP11 messages leaking up to 3 uninitialized bytes
  of memory by zeroing trailing alignment padding

----------------------------------------------------------------
Harald Freudenberger (5):
      s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code
      s390/zcrypt: Improve CCA CPRB length and overflow checks
      s390/zcrypt: Improve EP11 CPRB length and overflow checks
      s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
      s390/zcrypt: Pad trailing CCA or EP11 message with zeros

 drivers/s390/crypto/zcrypt_ccamisc.c  |  20 +-
 drivers/s390/crypto/zcrypt_ep11misc.c |  16 +-
 drivers/s390/crypto/zcrypt_msgtype6.c | 364 +++++++++++++++++++++++-----------
 3 files changed, 277 insertions(+), 123 deletions(-)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.