ACK: [SRU][Lunar/Mantic][PATCH 0/1] CVE-2023-6531

[Andrei Gherzan]

On 24/01/03 05:09PM, Yuxuan Luo wrote:
> [Impact]
> Allowing io_uring to send file descriptors over UNIX domain sockets
> leads to potential circular referencing which is error-prone for garbage
> collectors and has caused lots of problems. The upstream has decided to
> disble this feature before it creates more trouble.
> 
> [Backport]
> It is a clean cherry pick.
> 
> [Test]
> Compile and boot tested.
> 
> [Potential Regression]
> Although it certainly breaks existing users, the discussion in the
> mailing list believes "it's very low risk"[1].
> 
> ^[1]: https://lore.kernel.org/all/6d2d5231-4729-4783-bcc8-0d11396e30fb@kernel.dk/
> 
> 
> Pavel Begunkov (1):
>   io_uring/af_unix: disable sending io_uring over sockets
> 
>  io_uring/rsrc.h | 7 -------
>  net/core/scm.c  | 6 ++++++
>  2 files changed, 6 insertions(+), 7 deletions(-)

Acked-by: Andrei Gherzan <andrei.gherzan at canonical.com>

-- 
Andrei Gherzan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240104/4f06acd2/attachment-0001.sig>