From: Greg Kroah-Hartman Date: Fri, 10 Oct 2025 12:45:56 +0000 (+0200) Subject: drop queue-6.12/ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e6eb4b8be1db22b78a76ae49c4bc978359ad8f56;p=thirdparty%2Fkernel%2Fstable-queue.git drop queue-6.12/ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch --- diff --git a/queue-6.12/ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch b/queue-6.12/ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch deleted file mode 100644 index 1b0c7da339..0000000000 --- a/queue-6.12/ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch +++ /dev/null @@ -1,40 +0,0 @@ -From de4cbd704731778a2dc833ce5a24b38e5d672c05 Mon Sep 17 00:00:00 2001 -From: Ankit Khushwaha -Date: Wed, 8 Oct 2025 22:55:16 +0530 -Subject: ring buffer: Propagate __rb_map_vma return value to caller - -From: Ankit Khushwaha - -commit de4cbd704731778a2dc833ce5a24b38e5d672c05 upstream. - -The return value from `__rb_map_vma()`, which rejects writable or -executable mappings (VM_WRITE, VM_EXEC, or !VM_MAYSHARE), was being -ignored. As a result the caller of `__rb_map_vma` always returned 0 -even when the mapping had actually failed, allowing it to proceed -with an invalid VMA. - -Cc: stable@vger.kernel.org -Cc: Masami Hiramatsu -Cc: Mathieu Desnoyers -Link: https://lore.kernel.org/20251008172516.20697-1-ankitkhushwaha.linux@gmail.com -Fixes: 117c39200d9d7 ("ring-buffer: Introducing ring-buffer mapping functions") -Reported-by: syzbot+ddc001b92c083dbf2b97@syzkaller.appspotmail.com -Closes: https://syzkaller.appspot.com/bug?id=194151be8eaebd826005329b2e123aecae714bdb -Signed-off-by: Ankit Khushwaha -Signed-off-by: Steven Rostedt (Google) -Signed-off-by: Greg Kroah-Hartman ---- - kernel/trace/ring_buffer.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - ---- a/kernel/trace/ring_buffer.c -+++ b/kernel/trace/ring_buffer.c -@@ -7464,7 +7464,7 @@ static __init int rb_test(void *arg) - usleep_range(((data->cnt % 3) + 1) * 100, 1000); - } - -- return 0; -+ return err; - } - - static __init void rb_ipi(void *ignore) diff --git a/queue-6.12/series b/queue-6.12/series index 8b12b96c81..2667bfe245 100644 --- a/queue-6.12/series +++ b/queue-6.12/series @@ -33,4 +33,3 @@ driver-core-pm-set-power.no_callbacks-along-with-power.no_pm.patch crypto-rng-ensure-set_ent-is-always-present.patch net-9p-fix-double-req-put-in-p9_fd_cancelled.patch kvm-x86-don-t-re-check-l1-intercepts-when-completing-userspace-i-o.patch -ring-buffer-propagate-__rb_map_vma-return-value-to-caller.patch