Repository navigation
[ciqlts8_6] Multiple patches tested (2 commits) - #1725
Conversation
ciq-kernel-automation
Bot
added
the
created-by-kernelci
|
🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/39686513057 |
🔍 Upstream Linux Kernel Commit Check
This is an automated message from the kernel commit checker workflow. |
🔍 Diffofdiffs: 1 backport differs from upstreamOpen to anyone signed in to GitHub. Report expires 2027-01-19 22:16 UTC.
Checked PR revision |
|
✅ Validation checks completed successfully View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/39686513057 |
Will get this added. |
|
The |
…box devices jira VULN-46738 cve CVE-2024-53197 commit-author Benoît Sevens <bsevens@google.com> commit b909df1 commit-source-sha 0b4ea4b commit-source 4.19.y commit b909df1 upstream. A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating dev->config. This can lead to out-of-bounds accesses later, e.g. in usb_destroy_configuration. Signed-off-by: Benoît Sevens <bsevens@google.com> Fixes: 1da177e ("Linux-2.6.12-rc2") Cc: stable@kernel.org Link: https://patch.msgid.link/20241120124144.3814457-1-bsevens@google.com Signed-off-by: Takashi Iwai <tiwai@suse.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit b909df1) Signed-off-by: Brett Mastbergen <bmastbergen@ciq.com>
jira VULN-46738 cve-bf CVE-2024-53197 commit-author Dan Carpenter <dan.carpenter@linaro.org> commit f7d306b commit-source-sha e7c1fcd commit-source 5.10.y The usb_get_descriptor() function does DMA so we're not allowed to use a stack buffer for that. Doing DMA to the stack is not portable all architectures. Move the "new_device_descriptor" from being stored on the stack and allocate it with kmalloc() instead. Fixes: b909df1 ("ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices") Cc: stable@kernel.org Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Link: https://patch.msgid.link/60e3aa09-039d-46d2-934c-6f123026c2eb@stanley.mountain Signed-off-by: Takashi Iwai <tiwai@suse.de> Signed-off-by: Benoît Sevens <bsevens@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit e7c1fcd) Signed-off-by: Brett Mastbergen <bmastbergen@ciq.com>
You are right. I forgot I had to go way back for that one. Fixed. Thanks! |
3538a69 to
11b9a78
Compare
|
🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/39796905507 |
🔍 Upstream Linux Kernel Commit Check
This is an automated message from the kernel commit checker workflow. |
🔍 Diffofdiffs: All 2 backports differ from upstreamOpen to anyone signed in to GitHub. Report expires 2027-01-20 14:13 UTC.
Checked PR revision |
|
✅ Validation checks completed successfully View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/39796905507 |
This fixes doesn't fix anything. Its just a coding style change and wasn't tagged with stable, and wasn't backported to stable (except 6.19). From the commit message: I plan to leave it off unless reviewers feel strongly we should have it. |
|
🤖 Validation Checks In Progress Workflow run: https://github.com/ctrliq/kernel-src-tree/actions/runs/39798556052 |
🔍 Upstream Linux Kernel Commit Check
This is an automated message from the kernel commit checker workflow. |
🔍 Diffofdiffs: All 2 backports differ from upstreamOpen to anyone signed in to GitHub. Report expires 2027-01-20 14:25 UTC.
Checked PR revision |
|
✅ Validation checks completed successfully View full results: https://github.com/ctrliq/kernel-src-tree/actions/runs/39798556052 |
ciq-kernel-automation
Bot
changed the title
Summary
This PR has been automatically created after successful completion of all CI stages.
Commit Message(s)
Test Results
✅ Build Stage
✅ Boot Verification
✅ Kernel Selftests
✅ LTP Results
x86_64 regressions:
🤖 This PR was automatically generated by GitHub Actions
Run ID: 39797576898