mbox series

[GIT,PULL] hardening updates for v6.5-rc1-fixes

Message ID	202307071111.63B0BFB323@keescook
State	New
Headers	Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Date: Fri, 7 Jul 2023 11:12:28 -0700 From: Kees Cook <keescook@chromium.org> To: Linus Torvalds <torvalds@linux-foundation.org> Cc: linux-kernel@vger.kernel.org, "Borislav Petkov (AMD)" <bp@alien8.de>, Geert Uytterhoeven <geert@linux-m68k.org>, Greg Kroah-Hartman <gregkh@linuxfoundation.org>, "Gustavo A. R. Silva" <gustavoars@kernel.org>, Kees Cook <keescook@chromium.org>, Matthias Kaehlcke <mka@chromium.org>, Mirsad Todorovac <mirsad.todorovac@alu.unizg.hr> Subject: [GIT PULL] hardening updates for v6.5-rc1-fixes Message-ID: <202307071111.63B0BFB323@keescook> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Precedence: bulk
Series	[GIT,PULL] hardening updates for v6.5-rc1-fixes \| [GIT,PULL] hardening updates for v6.5-rc1-fixes

Pull-request

https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.5-rc1-fixes

Message

Kees Cook July 7, 2023, 6:12 p.m. UTC

  Hi Linus,

Please pull these handful of kernel hardening fixes for v6.5-rc1.

Thanks!

-Kees

The following changes since commit acf15e07eb06507c69f92394c36052677029b0a8:

  netfilter: ipset: Replace strlcpy with strscpy (2023-06-20 13:35:37 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.5-rc1-fixes

for you to fetch changes up to 01f23c5f1526f5b6ff744887aa511b9e69d4401b:

  usb: ch9: Replace bmSublinkSpeedAttr 1-element array with flexible array (2023-07-05 14:11:30 -0700)

----------------------------------------------------------------
hardening fixes for v6.5-rc1

- Check for NULL bdev in LoadPin (Matthias Kaehlcke)

- Revert unwanted KUnit FORTIFY build default

- Fix 1-element array causing boot warnings with xhci-hub

----------------------------------------------------------------
Kees Cook (2):
      Revert "fortify: Allow KUnit test to build without FORTIFY"
      usb: ch9: Replace bmSublinkSpeedAttr 1-element array with flexible array

Matthias Kaehlcke (1):
      dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter

 drivers/md/dm-verity-loadpin.c |  3 +++
 include/uapi/linux/usb/ch9.h   |  6 +++++-
 lib/Kconfig.debug              |  2 +-
 lib/fortify_kunit.c            | 14 --------------
 4 files changed, 9 insertions(+), 16 deletions(-)

Comments

pr-tracker-bot@kernel.org July 8, 2023, 7:18 p.m. UTC | #1

The pull request you sent on Fri, 7 Jul 2023 11:12:28 -0700:

> https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.5-rc1-fixes

has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/8fc3b8f082cc2f5faa6eae315b938bc5e79c332e

Thank you!