APPLIED: [SRU][Mantic][PATCH 0/1] CVE-2023-6560

[Stefan Bader]

On 12.01.24 23:05, Yuxuan Luo wrote:
> [Impact]
> It has been found that io_uring lacks checking user allocated
> discontigous pages in io_uring.c which is not supported at the moment.
> Failing to do so might leads to out-of-bound read, leading to potential
> memory leak or system crash.
> 
> [Backport]
> It is a clean cherry pick.
> 
> [Test]
> Tested against test suite in liburing.
> 
> [Potential Regression]
> Regression might occur when users allocating memory for their
> application using io_uring.
> 
> Jens Axboe (1):
>    io_uring: don't allow discontig pages for IORING_SETUP_NO_MMAP
> 
>   io_uring/io_uring.c | 39 +++++++++++++++++++++------------------
>   1 file changed, 21 insertions(+), 18 deletions(-)
> 

Applied to mantic:linux/master-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 48643 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240118/bb268fc3/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240118/bb268fc3/attachment-0001.sig>