[GIT PULL] hardening fixes for v6.18-rc5

From: Kees Cook

Date: Thu Nov 06 2025 - 14:52:59 EST


Hi Linus,

Please pull these hardening fixes for v6.18-rc5. This is a work-around
for a (now fixed) corner case in the arm32 build with Clang KCFI
enabled.

Thanks!

-Kees

The following changes since commit 211ddde0823f1442e4ad052a2f30f050145ccada:

Linux 6.18-rc2 (2025-10-19 15:19:16 -1000)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.18-rc5

for you to fetch changes up to c57f5fee54dfc83ee1d7f70f7beb9410b8466e9e:

libeth: xdp: Disable generic kCFI pass for libeth_xdp_tx_xmit_bulk() (2025-10-29 20:04:55 -0700)

----------------------------------------------------------------
hardening fixes for v6.18-rc5

- Introduce __nocfi_generic for arm32 Clang (Nathan Chancellor)

----------------------------------------------------------------
Nathan Chancellor (3):
compiler_types: Introduce __nocfi_generic
ARM: Select ARCH_USES_CFI_GENERIC_LLVM_PASS
libeth: xdp: Disable generic kCFI pass for libeth_xdp_tx_xmit_bulk()

arch/Kconfig | 7 +++++++
arch/arm/Kconfig | 2 ++
include/linux/compiler_types.h | 6 ++++++
include/net/libeth/xdp.h | 2 +-
4 files changed, 16 insertions(+), 1 deletion(-)

--
Kees Cook