2024-05-23 23:38:07

by Kees Cook

Subject: [GIT PULL] hardening fixes for v6.10-rc1

Hi Linus,

Please pull these hardening fixes for v6.10-rc1-fixes.

Thanks!

-Kees

The following changes since commit 6d305cbef1aa01b9714e01e35f3d5c28544cf04d:

uapi: stddef.h: Provide UAPI macros for __counted_by_{le, be} (2024-05-08 00:42:25 -0700)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.10-rc1-fixes

for you to fetch changes up to ae1a863bcdbd6ea2abc93519a82ab5d715d5dcbc:

kunit/fortify: Fix memcmp() test to be amplitude agnostic (2024-05-18 13:46:10 -0700)

----------------------------------------------------------------
hardening fixes for v6.10-rc1

- loadpin: Prevent SECURITY_LOADPIN_ENFORCE=y without module decompression
(Stephen Boyd)

- ubsan: Restore dependency on ARCH_HAS_UBSAN

- kunit/fortify: Fix memcmp() test to be amplitude agnostic

----------------------------------------------------------------
Kees Cook (2):
ubsan: Restore dependency on ARCH_HAS_UBSAN
kunit/fortify: Fix memcmp() test to be amplitude agnostic

Stephen Boyd (1):
loadpin: Prevent SECURITY_LOADPIN_ENFORCE=y without module decompression

lib/Kconfig.ubsan | 1 +
lib/fortify_kunit.c | 2 +-
security/loadpin/Kconfig | 3 +++
3 files changed, 5 insertions(+), 1 deletion(-)

--
Kees Cook

2024-05-24 16:45:43

by pr-tracker-bot

Subject: Re: [GIT PULL] hardening fixes for v6.10-rc1

The pull request you sent on Thu, 23 May 2024 16:37:56 -0700:

> https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.10-rc1-fixes

has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/b0a9ba13ffdb9591d468d84f26ec2cefdd7625b4

Thank you!

--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/prtracker.html