]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
futex: Require sys_futex_requeue() to have identical flags
authorPeter Zijlstra <peterz@infradead.org>
Thu, 26 Mar 2026 12:35:53 +0000 (13:35 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 2 Apr 2026 11:09:54 +0000 (13:09 +0200)
commit027145ace09fad4c7cbcd6c61fe9b429c63eb0e5
tree3568ed9ac9808075f8d573b2555ddf56d7a743aa
parent33dce5758914b5c6efe2a974581a7719b100efea
futex: Require sys_futex_requeue() to have identical flags

[ Upstream commit 19f94b39058681dec64a10ebeb6f23fe7fc3f77a ]

Nicholas reported that his LLM found it was possible to create a UaF
when sys_futex_requeue() is used with different flags. The initial
motivation for allowing different flags was the variable sized futex,
but since that hasn't been merged (yet), simply mandate the flags are
identical, as is the case for the old style sys_futex() requeue
operations.

Fixes: 0f4b5f972216 ("futex: Add sys_futex_requeue()")
Reported-by: Nicholas Carlini <npc@anthropic.com>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
kernel/futex/syscalls.c