kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-11-10 20:48:12 +00:00
Code Issues Releases Packages Activity

- dm-integrity:

Browse source 
- validate the superblock after re-reading it
    - fix buffer overflow if tag size > 64
 
 - dm:
    - fix reading up to 7 bytes beyond the end of block in dm-ioctl
    - fix reading free memory if the ioctls are called concurrently
 
 - dm-crypt:
    - fix a crash on invalid table line
 
 - dm-snap:
    - fix a crash on invalid table line
 -----BEGIN PGP SIGNATURE-----
 
 iIoEABYKADIWIQRnH8MwLyZDhyYfesYTAyx9YGnhbQUCasYIiRQcbXBhdG9ja2FA
 cmVkaGF0LmNvbQAKCRATAyx9YGnhbZsMAQCkQZOhRxNpWdCK1+vOK8TLA8Xvv0Ay
 vTsPiZ0BtZbS9gEA4Pv3pKaMxYH061Uw2YPhxw/5LOT+GBUYoHwMA5xeGAQ=
 =1Uzr
 -----END PGP SIGNATURE-----

Merge tag 'for-7.3/dm-fixes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

Pull device mapper fixes from Mikulas Patocka:
 "dm-integrity:
   - validate the superblock after re-reading it
   - fix buffer overflow if tag size > 64

  dm:
   - fix reading up to 7 bytes beyond the end of block in dm-ioctl
   - fix reading free memory if the ioctls are called concurrently

  dm-crypt:
   - fix a crash on invalid table line

  dm-snap:
   - fix a crash on invalid table line"

* tag 'for-7.3/dm-fixes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
  dm-integrity: validate the superblock on resume
  dm-snap: reject the transient exception store for snapshot-merge
  dm: fix reading free memory in do_resume
  dm ioctl: don't let data_start run past the buffer
  dm-crypt: reject the lmk IV mode with AEAD ciphers
  dm-integrity: fix buffer overflow in inline mode with large tag size
This commit is contained in:
Linus Torvalds 2026-10-07 12:19:52 +02:00
commit 0f2732620d
4 changed files with 83 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files