]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
kfence: fix KASAN HW tags bypass via runtime sample_interval change
authorAlexander Potapenko <glider@google.com>
Thu, 7 May 2026 09:52:37 +0000 (11:52 +0200)
committerAndrew Morton <akpm@linux-foundation.org>
Fri, 29 May 2026 04:24:46 +0000 (21:24 -0700)
commite4f5f6f3c199ae7fbe142da6b79a97a504ac7e55
tree86b760b752dad3eed4b663af81fe8fd57be9ad0a
parent83544c68f71da543f59fdc9b30c1f5ff66de1a25
kfence: fix KASAN HW tags bypass via runtime sample_interval change

If a user writes a non-zero value to the sample_interval module parameter
at runtime, the missing KASAN HW tags check in the late init path allows
KFENCE to be enabled alongside KASAN HW tags, bypassing the boot
restriction.

This patch adds the missing check to param_set_sample_interval() to reject
the parameter change if KASAN HW tags are enabled.

Link: https://lore.kernel.org/20260507095237.741017-1-glider@google.com
Fixes: 09833d99db36 ("mm/kfence: disable KFENCE upon KASAN HW tags enablement")
Signed-off-by: Alexander Potapenko <glider@google.com>
Cc: Marco Elver <elver@google.com>
Cc: Greg Thelen <gthelen@google.com>
Cc: Roman Gushchin <roman.gushchin@linux.dev>
Cc: Pimyn Girgis <pimyn@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
mm/kfence/core.c