[PATCH 0/2] arm64: modules: Reject loading of malformed modules

[Adrian Barnaś]

Hi,

Here are a couple of patches to reject the loading of malformed modules
on arm64 when the SCS patching is only partially applied or we detect
an alternative callback function used in the module text.

The SCS issue is largely theoretical. The code currently performs
a "dry-run" (which we remove), and leave module code as-is if failed.
However the latter issue was reported to crash the kernel at [1].

Patches based on v6.17-rc1.

Thanks,
Adrian

[1] https://lore.kernel.org/all/20250807072700.348514-1-fanqincui@xxxxxxx/

Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
Cc: Will Deacon <will@xxxxxxxxxx>
Cc: Ard Biesheuvel <ardb@xxxxxxxxxx>
Cc: Dylan Hatch <dylanbhatch@xxxxxxxxxx>
Cc: Mark Rutland <mark.rutland@xxxxxxx>

Adrian Barnaś (2):
  arch: arm64: Fail module loading if dynamic SCS patching fails
  arch: arm64: Reject modules with internal alternative callbacks

 arch/arm64/include/asm/alternative.h |  4 ++--
 arch/arm64/include/asm/scs.h         |  2 +-
 arch/arm64/kernel/alternative.c      | 15 ++++++++++-----
 arch/arm64/kernel/module.c           | 14 ++++++++++----
 arch/arm64/kernel/pi/map_kernel.c    |  2 +-
 arch/arm64/kernel/pi/patch-scs.c     | 15 +++++++++++----
 arch/arm64/kernel/pi/pi.h            |  2 +-
 7 files changed, 36 insertions(+), 18 deletions(-)

-- 
2.51.0.534.gc79095c0ca-goog