linux-hardening  

Messages by Thread

• [PATCH 0/3] Allow default HARDENED_USERCOPY to be set at compile time Mel Gorman
  • [PATCH 3/3] fortify: Move FORTIFY_SOURCE under 'Kernel hardening options' Mel Gorman
  • [PATCH 2/3] mm: security: Allow default HARDENED_USERCOPY to be set at compile time Mel Gorman
  • [PATCH 1/3] mm: security: Move hardened usercopy under 'Kernel hardening options' Mel Gorman
• [PATCH] pstore/zone: rewrite some comments for better understanding Eugen Hristev
• [PATCH v2] hv_netvsc: Replace one-element array with flexible array member Thorsten Blum
  • Re: [PATCH v2] hv_netvsc: Replace one-element array with flexible array member Roman Kisel
  • Re: [PATCH v2] hv_netvsc: Replace one-element array with flexible array member Jakub Kicinski
  • Re: [PATCH v2] hv_netvsc: Replace one-element array with flexible array member Przemek Kitszel
  • Re: [PATCH v2] hv_netvsc: Replace one-element array with flexible array member Roman Kisel
  • Re: [PATCH v2] hv_netvsc: Replace one-element array with flexible array member patchwork-bot+netdevbpf
• [PATCH] hv_netvsc: Replace one-element array with flexible array member Thorsten Blum
  • Re: [PATCH] hv_netvsc: Replace one-element array with flexible array member Roman Kisel
  • Re: [PATCH] hv_netvsc: Replace one-element array with flexible array member Thorsten Blum
• [PATCH] s390/vfio-ap: Replace one-element array with flexible array member Thorsten Blum
• [PATCH v14 0/4] Initial Marvell PXA1908 support Duje Mihanović via B4 Relay
  • [PATCH v14 2/4] arm64: Kconfig.platforms: Add config for Marvell PXA1908 platform Duje Mihanović via B4 Relay
  • Re: [PATCH v14 2/4] arm64: Kconfig.platforms: Add config for Marvell PXA1908 platform Krzysztof Kozlowski
  • Re: [PATCH v14 2/4] arm64: Kconfig.platforms: Add config for Marvell PXA1908 platform kernel test robot
  • [PATCH v14 4/4] MAINTAINERS: add myself as Marvell PXA1908 maintainer Duje Mihanović via B4 Relay
  • Re: [PATCH v14 4/4] MAINTAINERS: add myself as Marvell PXA1908 maintainer Krzysztof Kozlowski
  • Re: [PATCH v14 4/4] MAINTAINERS: add myself as Marvell PXA1908 maintainer Duje Mihanović
  • Re: [PATCH v14 4/4] MAINTAINERS: add myself as Marvell PXA1908 maintainer Krzysztof Kozlowski
  • [PATCH v14 1/4] dt-bindings: marvell: Document PXA1908 SoC and samsung,coreprimevelte Duje Mihanović via B4 Relay
  • [PATCH v14 3/4] arm64: dts: Add DTS for Marvell PXA1908 and samsung,coreprimevelte Duje Mihanović via B4 Relay
  • Re: [PATCH v14 3/4] arm64: dts: Add DTS for Marvell PXA1908 and samsung,coreprimevelte Krzysztof Kozlowski
  • Re: [PATCH v14 3/4] arm64: dts: Add DTS for Marvell PXA1908 and samsung,coreprimevelte Duje Mihanović
  • Re: [PATCH v14 0/4] Initial Marvell PXA1908 support Rob Herring (Arm)
• [PATCH v4 00/30] context_tracking,x86: Defer some IPIs until a user->kernel transition Valentin Schneider
  • [PATCH v4 01/30] objtool: Make validate_call() recognize indirect calls to pv_ops[] Valentin Schneider
  • [PATCH v4 02/30] objtool: Flesh out warning related to pv_ops[] calls Valentin Schneider
  • [PATCH v4 03/30] rcu: Add a small-width RCU watching counter debug option Valentin Schneider
  • [PATCH v4 04/30] rcutorture: Make TREE04 use CONFIG_RCU_DYNTICKS_TORTURE Valentin Schneider
  • [PATCH v4 05/30] jump_label: Add annotations for validating noinstr usage Valentin Schneider
  • [PATCH v4 06/30] static_call: Add read-only-after-init static calls Valentin Schneider
  • [PATCH v4 07/30] x86/paravirt: Mark pv_sched_clock static call as __ro_after_init Valentin Schneider
  • [PATCH v4 08/30] x86/idle: Mark x86_idle static call as __ro_after_init Valentin Schneider
  • [PATCH v4 09/30] x86/paravirt: Mark pv_steal_clock static call as __ro_after_init Valentin Schneider
  • [PATCH v4 10/30] riscv/paravirt: Mark pv_steal_clock static call as __ro_after_init Valentin Schneider
  • Re: [PATCH v4 10/30] riscv/paravirt: Mark pv_steal_clock static call as __ro_after_init Andrew Jones
  • [PATCH v4 11/30] loongarch/paravirt: Mark pv_steal_clock static call as __ro_after_init Valentin Schneider
  • [PATCH v4 12/30] arm64/paravirt: Mark pv_steal_clock static call as __ro_after_init Valentin Schneider
  • [PATCH v4 13/30] arm/paravirt: Mark pv_steal_clock static call as __ro_after_init Valentin Schneider
  • [PATCH v4 14/30] perf/x86/amd: Mark perf_lopwr_cb static call as __ro_after_init Valentin Schneider
  • [PATCH v4 15/30] sched/clock: Mark sched_clock_running key as __ro_after_init Valentin Schneider
  • [PATCH v4 16/30] x86/speculation/mds: Mark mds_idle_clear key as allowed in .noinstr Valentin Schneider
  • [PATCH v4 17/30] sched/clock, x86: Mark __sched_clock_stable key as allowed in .noinstr Valentin Schneider
  • [PATCH v4 18/30] x86/kvm/vmx: Mark vmx_l1d_should flush and vmx_l1d_flush_cond keys as allowed in .noinstr Valentin Schneider
  • Re: [PATCH v4 18/30] x86/kvm/vmx: Mark vmx_l1d_should flush and vmx_l1d_flush_cond keys as allowed in .noinstr Sean Christopherson
  • Re: [PATCH v4 18/30] x86/kvm/vmx: Mark vmx_l1d_should flush and vmx_l1d_flush_cond keys as allowed in .noinstr Valentin Schneider
  • [PATCH v4 19/30] stackleack: Mark stack_erasing_bypass key as allowed in .noinstr Valentin Schneider
  • [PATCH v4 20/30] objtool: Add noinstr validation for static branches/calls Valentin Schneider
  • [PATCH v4 21/30] context_tracking: Explicitely use CT_STATE_KERNEL where it is missing Valentin Schneider
  • [PATCH v4 22/30] context_tracking: Exit CT_STATE_IDLE upon irq/nmi entry Valentin Schneider
  • [PATCH v4 23/30] context_tracking: Turn CT_STATE_* into bits Valentin Schneider
  • [PATCH v4 24/30] context-tracking: Introduce work deferral infrastructure Valentin Schneider
  • [PATCH v4 25/30] context_tracking,x86: Defer kernel text patching IPIs Valentin Schneider
  • Re: [PATCH v4 25/30] context_tracking,x86: Defer kernel text patching IPIs Sean Christopherson
  • Re: [PATCH v4 25/30] context_tracking,x86: Defer kernel text patching IPIs Sean Christopherson
  • Re: [PATCH v4 25/30] context_tracking,x86: Defer kernel text patching IPIs Valentin Schneider
  • Re: [PATCH v4 25/30] context_tracking,x86: Defer kernel text patching IPIs Valentin Schneider
  • Re: [PATCH v4 25/30] context_tracking,x86: Defer kernel text patching IPIs Sean Christopherson
  • Re: [PATCH v4 25/30] context_tracking,x86: Defer kernel text patching IPIs Sean Christopherson
  • [PATCH v4 26/30] x86,tlb: Make __flush_tlb_global() noinstr-compliant Valentin Schneider
  • Re: [PATCH v4 26/30] x86,tlb: Make __flush_tlb_global() noinstr-compliant Dave Hansen
  • Re: [PATCH v4 26/30] x86,tlb: Make __flush_tlb_global() noinstr-compliant Valentin Schneider
  • [PATCH v4 27/30] x86/tlb: Make __flush_tlb_local() noinstr-compliant Valentin Schneider
  • Re: [PATCH v4 27/30] x86/tlb: Make __flush_tlb_local() noinstr-compliant Sean Christopherson
  • [PATCH v4 28/30] x86/tlb: Make __flush_tlb_all() noinstr Valentin Schneider
  • [PATCH v4 29/30] x86/mm, mm/vmalloc: Defer flush_tlb_kernel_range() targeting NOHZ_FULL CPUs Valentin Schneider
  • Re: [PATCH v4 29/30] x86/mm, mm/vmalloc: Defer flush_tlb_kernel_range() targeting NOHZ_FULL CPUs Jann Horn
  • Re: [PATCH v4 29/30] x86/mm, mm/vmalloc: Defer flush_tlb_kernel_range() targeting NOHZ_FULL CPUs Valentin Schneider
  • Re: [PATCH v4 29/30] x86/mm, mm/vmalloc: Defer flush_tlb_kernel_range() targeting NOHZ_FULL CPUs Jann Horn
  • Re: [PATCH v4 29/30] x86/mm, mm/vmalloc: Defer flush_tlb_kernel_range() targeting NOHZ_FULL CPUs Valentin Schneider
  • Re: [PATCH v4 29/30] x86/mm, mm/vmalloc: Defer flush_tlb_kernel_range() targeting NOHZ_FULL CPUs Uladzislau Rezki
  • Re: [PATCH v4 29/30] x86/mm, mm/vmalloc: Defer flush_tlb_kernel_range() targeting NOHZ_FULL CPUs Valentin Schneider
  • [PATCH v4 30/30] context-tracking: Add a Kconfig to enable IPI deferral for NO_HZ_IDLE Valentin Schneider
• [DISCUSSION] vsprintf: the current state of restricted pointers (%pK) Thomas Weißschuh
  • Re: [DISCUSSION] vsprintf: the current state of restricted pointers (%pK) Andy Shevchenko
  • Re: [DISCUSSION] vsprintf: the current state of restricted pointers (%pK) Petr Mladek
• [PATCH v2] fortify: use __builtin_constant_p() in strlen() Vincent Mailhol
• [PATCH v2] treewide: const qualify ctl_tables where applicable Joel Granados
  • Re: [PATCH v2] treewide: const qualify ctl_tables where applicable Anna Schumaker
  • Re: [PATCH v2] treewide: const qualify ctl_tables where applicable Baoquan He
  • Re: [PATCH v2] treewide: const qualify ctl_tables where applicable Thomas Gleixner
  • Re: [PATCH v2] treewide: const qualify ctl_tables where applicable Wei Liu
  • Re: [PATCH v2] treewide: const qualify ctl_tables where applicable Bill O'Donnell
• [PATCH v2] pstore/zone: avoid dereferencing zero sized ptr after init zones Eugen Hristev
  • Re: [PATCH v2] pstore/zone: avoid dereferencing zero sized ptr after init zones Kees Cook
• [PATCH] treewide: const qualify ctl_tables where applicable Joel Granados
  • Re: [PATCH] treewide: const qualify ctl_tables where applicable Steven Rostedt
  • Re: [PATCH] treewide: const qualify ctl_tables where applicable Jani Nikula
  • Re: [PATCH] treewide: const qualify ctl_tables where applicable Martin K. Petersen
  • Re: [PATCH] treewide: const qualify ctl_tables where applicable Corey Minyard
  • Re: [PATCH] treewide: const qualify ctl_tables where applicable Darrick J. Wong
  • Re: [PATCH] treewide: const qualify ctl_tables where applicable Song Liu
  • Re: [PATCH] treewide: const qualify ctl_tables where applicable Dixit, Ashutosh
• [linus:master] [fortify] 239d87327d: vm-scalability.throughput 17.3% improvement kernel test robot
  • Re: [linus:master] [fortify] 239d87327d: vm-scalability.throughput 17.3% improvement Kees Cook
  • Re: [linus:master] [fortify] 239d87327d: vm-scalability.throughput 17.3% improvement Kees Cook
  • Re: [linus:master] [fortify] 239d87327d: vm-scalability.throughput 17.3% improvement Mateusz Guzik
  • Re: [linus:master] [fortify] 239d87327d: vm-scalability.throughput 17.3% improvement Kees Cook
  • Re: [linus:master] [fortify] 239d87327d: vm-scalability.throughput 17.3% improvement Mateusz Guzik
  • Re: [linus:master] [fortify] 239d87327d: vm-scalability.throughput 17.3% improvement Kees Cook
  • Re: [linus:master] [fortify] 239d87327d: vm-scalability.throughput 17.3% improvement Mateusz Guzik
• [PATCH] fortify: turn strlen() into an inline function using __builtin_constant_p() Vincent Mailhol
  • Re: [PATCH] fortify: turn strlen() into an inline function using __builtin_constant_p() Kees Cook
  • Re: [PATCH] fortify: turn strlen() into an inline function using __builtin_constant_p() Vincent Mailhol
  • Re: [PATCH] fortify: turn strlen() into an inline function using __builtin_constant_p() Vincent Mailhol
  • Re: [PATCH] fortify: turn strlen() into an inline function using __builtin_constant_p() David Laight
  • Re: [PATCH] fortify: turn strlen() into an inline function using __builtin_constant_p() Vincent Mailhol
  • Re: [PATCH] fortify: turn strlen() into an inline function using __builtin_constant_p() kernel test robot
  • Re: [PATCH] fortify: turn strlen() into an inline function using __builtin_constant_p() kernel test robot
• [RFC PATCH v2 00/15] pkeys-based page table hardening Kevin Brodsky
  • [RFC PATCH v2 01/15] mm: Introduce kpkeys Kevin Brodsky
  • [RFC PATCH v2 03/15] arm64: mm: Enable overlays for all EL1 indirect permissions Kevin Brodsky
  • [RFC PATCH v2 02/15] set_memory: Introduce set_memory_pkey() stub Kevin Brodsky
  • [RFC PATCH v2 04/15] arm64: Introduce por_set_pkey_perms() helper Kevin Brodsky
  • [RFC PATCH v2 05/15] arm64: Implement asm/kpkeys.h using POE Kevin Brodsky
  • [RFC PATCH v2 06/15] arm64: set_memory: Implement set_memory_pkey() Kevin Brodsky
  • [RFC PATCH v2 08/15] mm: Introduce kernel_pgtables_set_pkey() Kevin Brodsky
  • [RFC PATCH v2 09/15] mm: Introduce kpkeys_hardened_pgtables Kevin Brodsky
  • [RFC PATCH v2 07/15] arm64: Enable kpkeys Kevin Brodsky
  • [RFC PATCH v2 10/15] mm: Allow __pagetable_ctor() to fail Kevin Brodsky
  • [RFC PATCH v2 11/15] mm: Map page tables with privileged pkey Kevin Brodsky
  • [RFC PATCH v2 12/15] arm64: kpkeys: Support KPKEYS_LVL_PGTABLES Kevin Brodsky
  • [RFC PATCH v2 13/15] arm64: mm: Guard page table writes with kpkeys Kevin Brodsky
  • Re: [RFC PATCH v2 13/15] arm64: mm: Guard page table writes with kpkeys Qi Zheng
  • Re: [RFC PATCH v2 13/15] arm64: mm: Guard page table writes with kpkeys Kevin Brodsky
  • [RFC PATCH v2 15/15] mm: Add basic tests for kpkeys_hardened_pgtables Kevin Brodsky
  • [RFC PATCH v2 14/15] arm64: Enable kpkeys_hardened_pgtables support Kevin Brodsky
  • Re: [RFC PATCH v2 00/15] pkeys-based page table hardening Dave Hansen
  • Re: [RFC PATCH v2 00/15] pkeys-based page table hardening Kevin Brodsky
• [PATCH net-next] net: Silence false field-spanning write warning in ip_tunnel_info_opts_set() memcpy Gal Pressman
  • Re: [PATCH net-next] net: Silence false field-spanning write warning in ip_tunnel_info_opts_set() memcpy Kees Cook
  • Re: [PATCH net-next] net: Silence false field-spanning write warning in ip_tunnel_info_opts_set() memcpy Gal Pressman
  • Re: [PATCH net-next] net: Silence false field-spanning write warning in ip_tunnel_info_opts_set() memcpy Gal Pressman
  • Re: [PATCH net-next] net: Silence false field-spanning write warning in ip_tunnel_info_opts_set() memcpy Kees Cook
  • Re: [PATCH net-next] net: Silence false field-spanning write warning in ip_tunnel_info_opts_set() memcpy Gal Pressman
• [PATCH] hardening: Document INIT_STACK_ALL_PATTERN behavior with GCC Geert Uytterhoeven
  • Re: [PATCH] hardening: Document INIT_STACK_ALL_PATTERN behavior with GCC Kees Cook
• Re: [PATCH v2 04/11] dt-bindings: sram: qcom,imem: Document MSM8976 Rob Herring (Arm)
• Re: security/landlock/ruleset.c:96:9: warning: 'memcpy' accessing 4294967295 bytes at offsets 20 and 0 overlaps 6442450943 bytes at offset -2147483648 Mickaël Salaün
  • Re: security/landlock/ruleset.c:96:9: warning: 'memcpy' accessing 4294967295 bytes at offsets 20 and 0 overlaps 6442450943 bytes at offset -2147483648 Kees Cook
• [PATCH] pstore/blk: trivial typo fixes Eugen Hristev
  • Re: [PATCH] pstore/blk: trivial typo fixes Kees Cook
• [PATCH] wifi: cfg80211: Move cfg80211_scan_req_add_chan() n_channels increment earlier Kees Cook
  • Re: [PATCH] wifi: cfg80211: Move cfg80211_scan_req_add_chan() n_channels increment earlier Gustavo A. R. Silva
• Re: UBSAN array-index-out-of-bounds: cfg80211_scan_6ghz Nathan Chancellor
  • Re: UBSAN array-index-out-of-bounds: cfg80211_scan_6ghz Kees Cook
  • Re: UBSAN array-index-out-of-bounds: cfg80211_scan_6ghz John Rowley
• [PATCH] clk: ti: use kcalloc() instead of kzalloc() Ethan Carter Edwards
  • Re: [PATCH] clk: ti: use kcalloc() instead of kzalloc() Stephen Boyd
• [PATCH] pstore/zone: avoid dereferencing zero sized ptr after init zones Eugen Hristev
  • Re: [PATCH] pstore/zone: avoid dereferencing zero sized ptr after init zones Kees Cook
• [PATCH v2 0/6] module: sysfs: Cleanups and preparation for const struct bin_attribute Thomas Weißschuh
  • [PATCH v2 1/6] module: sysfs: Drop member 'module_sect_attrs::nsections' Thomas Weißschuh
  • [PATCH v2 6/6] module: sysfs: Use const 'struct bin_attribute' Thomas Weißschuh
  • [PATCH v2 2/6] module: sysfs: Drop member 'module_sect_attr::address' Thomas Weißschuh
  • [PATCH v2 5/6] module: sysfs: Add notes attributes through attribute_group Thomas Weißschuh
  • [PATCH v2 4/6] module: sysfs: Simplify section attribute allocation Thomas Weißschuh
  • [PATCH v2 3/6] module: sysfs: Drop 'struct module_sect_attr' Thomas Weißschuh
  • Re: [PATCH v2 0/6] module: sysfs: Cleanups and preparation for const struct bin_attribute Petr Pavlu
  • Re: [PATCH v2 0/6] module: sysfs: Cleanups and preparation for const struct bin_attribute Greg KH
• [for-next][PATCH 14/15] tracing/string: Create and use __free(argv_free) in trace_dynevent.c Steven Rostedt
• [PATCH] sched/topology: change kzalloc to kcalloc Ethan Carter Edwards
• [PATCH] pstore/zone: fix trivial comment typo Eugen Hristev
• [PATCH v2] thermal/debugfs: change kzalloc to kcalloc Ethan Carter Edwards
• [PATCH] thermal/debugfs: change kzalloc to kcalloc Ethan Carter Edwards
• [PATCH] stackleak: Use str_enabled_disabled() helper in stack_erasing_sysctl() Thorsten Blum
  • Re: [PATCH] stackleak: Use str_enabled_disabled() helper in stack_erasing_sysctl() Kees Cook
• [RESEND PATCH] sctp: Replace zero-length array with flexible array member Thorsten Blum
• [PATCH v2] stddef: make __struct_group() UAPI C++-friendly Alexander Lobakin
  • Re: [PATCH v2] stddef: make __struct_group() UAPI C++-friendly Gustavo A. R. Silva
  • Re: [PATCH v2] stddef: make __struct_group() UAPI C++-friendly Kees Cook
• [PATCH] stddef: make __struct_group() UAPI C++-friendly Alexander Lobakin
  • Re: [PATCH] stddef: make __struct_group() UAPI C++-friendly Kees Cook
• Re: [PATCH net] xfrm: Rewrite key length conversion to avoid overflows Dan Carpenter
  • Re: [PATCH net] xfrm: Rewrite key length conversion to avoid overflows Herbert Xu
• Re: [PATCH net-next 05/12] net/mlx5: fs, add mlx5_fs_pool API Kees Cook
  • Re: [PATCH net-next 05/12] net/mlx5: fs, add mlx5_fs_pool API Moshe Shemesh
• [PATCH v2] net: core: Convert inet_addr_is_any() to sockaddr_storage Kees Cook
  • Re: [PATCH v2] net: core: Convert inet_addr_is_any() to sockaddr_storage Paolo Abeni
• [PATCH] UAPI: net/sched: Open-code __struct_group() in flex struct tc_u32_sel Kees Cook
  • Re: [PATCH] UAPI: net/sched: Open-code __struct_group() in flex struct tc_u32_sel Alexander Lobakin
  • Re: [PATCH] UAPI: net/sched: Open-code __struct_group() in flex struct tc_u32_sel Gustavo A. R. Silva
  • Re: [PATCH] UAPI: net/sched: Open-code __struct_group() in flex struct tc_u32_sel Alexander Lobakin
  • Re: [PATCH] UAPI: net/sched: Open-code __struct_group() in flex struct tc_u32_sel Gustavo A. R. Silva
  • Re: [PATCH] UAPI: net/sched: Open-code __struct_group() in flex struct tc_u32_sel Alexander Lobakin
  • Re: [PATCH] UAPI: net/sched: Open-code __struct_group() in flex struct tc_u32_sel Gustavo A. R. Silva
  • Re: [PATCH] UAPI: net/sched: Open-code __struct_group() in flex struct tc_u32_sel Gustavo A. R. Silva
  • Re: [PATCH] UAPI: net/sched: Open-code __struct_group() in flex struct tc_u32_sel Kees Cook
• [PATCH] rtnetlink: do_setlink: Use true struct sockaddr Kees Cook
  • Re: [PATCH] rtnetlink: do_setlink: Use true struct sockaddr Kuniyuki Iwashima
  • Re: [PATCH] rtnetlink: do_setlink: Use true struct sockaddr Kees Cook
  • Re: [PATCH] rtnetlink: do_setlink: Use true struct sockaddr Kuniyuki Iwashima
  • Re: [PATCH] rtnetlink: do_setlink: Use true struct sockaddr Kees Cook
  • Re: [PATCH] rtnetlink: do_setlink: Use true struct sockaddr ericnetdev dumazet
• [PATCH] net: core: Convert inet_addr_is_any() to sockaddr_storage Kees Cook
  • Re: [PATCH] net: core: Convert inet_addr_is_any() to sockaddr_storage Christoph Hellwig

• Earlier messages