]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
futex: Require sys_futex_requeue() to have identical flags
authorPeter Zijlstra <peterz@infradead.org>
Thu, 26 Mar 2026 12:35:53 +0000 (13:35 +0100)
committerPeter Zijlstra <peterz@infradead.org>
Thu, 26 Mar 2026 15:13:48 +0000 (16:13 +0100)
commit19f94b39058681dec64a10ebeb6f23fe7fc3f77a
treed4dd07c8014ce29407a16f82651b303fb280fb9f
parentc369299895a591d96745d6492d4888259b004a9e
futex: Require sys_futex_requeue() to have identical flags

Nicholas reported that his LLM found it was possible to create a UaF
when sys_futex_requeue() is used with different flags. The initial
motivation for allowing different flags was the variable sized futex,
but since that hasn't been merged (yet), simply mandate the flags are
identical, as is the case for the old style sys_futex() requeue
operations.

Fixes: 0f4b5f972216 ("futex: Add sys_futex_requeue()")
Reported-by: Nicholas Carlini <npc@anthropic.com>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
kernel/futex/syscalls.c