]> git.ipfire.org Git - thirdparty/kernel/stable-queue.git/commitdiff
drop queue-6.12/ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch master
authorGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 10 Oct 2025 12:45:56 +0000 (14:45 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 10 Oct 2025 12:45:56 +0000 (14:45 +0200)
queue-6.12/ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch [deleted file]
queue-6.12/series

diff --git a/queue-6.12/ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch b/queue-6.12/ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch
deleted file mode 100644 (file)
index 1b0c7da..0000000
+++ /dev/null
@@ -1,40 +0,0 @@
-From de4cbd704731778a2dc833ce5a24b38e5d672c05 Mon Sep 17 00:00:00 2001
-From: Ankit Khushwaha <ankitkhushwaha.linux@gmail.com>
-Date: Wed, 8 Oct 2025 22:55:16 +0530
-Subject: ring buffer: Propagate __rb_map_vma return value to caller
-
-From: Ankit Khushwaha <ankitkhushwaha.linux@gmail.com>
-
-commit de4cbd704731778a2dc833ce5a24b38e5d672c05 upstream.
-
-The return value from `__rb_map_vma()`, which rejects writable or
-executable mappings (VM_WRITE, VM_EXEC, or !VM_MAYSHARE), was being
-ignored. As a result the caller of `__rb_map_vma` always returned 0
-even when the mapping had actually failed, allowing it to proceed
-with an invalid VMA.
-
-Cc: stable@vger.kernel.org
-Cc: Masami Hiramatsu <mhiramat@kernel.org>
-Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
-Link: https://lore.kernel.org/20251008172516.20697-1-ankitkhushwaha.linux@gmail.com
-Fixes: 117c39200d9d7 ("ring-buffer: Introducing ring-buffer mapping functions")
-Reported-by: syzbot+ddc001b92c083dbf2b97@syzkaller.appspotmail.com
-Closes: https://syzkaller.appspot.com/bug?id=194151be8eaebd826005329b2e123aecae714bdb
-Signed-off-by: Ankit Khushwaha <ankitkhushwaha.linux@gmail.com>
-Signed-off-by: Steven Rostedt (Google) <rostedt@goodmis.org>
-Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
----
- kernel/trace/ring_buffer.c |    2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
---- a/kernel/trace/ring_buffer.c
-+++ b/kernel/trace/ring_buffer.c
-@@ -7464,7 +7464,7 @@ static __init int rb_test(void *arg)
-               usleep_range(((data->cnt % 3) + 1) * 100, 1000);
-       }
--      return 0;
-+      return err;
- }
- static __init void rb_ipi(void *ignore)
index 8b12b96c8189e11b55ae4a3c927a1dbeed3f77f6..2667bfe245a4dededa60b961827a8cfebbc6437b 100644 (file)
@@ -33,4 +33,3 @@ driver-core-pm-set-power.no_callbacks-along-with-power.no_pm.patch
 crypto-rng-ensure-set_ent-is-always-present.patch
 net-9p-fix-double-req-put-in-p9_fd_cancelled.patch
 kvm-x86-don-t-re-check-l1-intercepts-when-completing-userspace-i-o.patch
-ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch