[GIT PULL] hardening fixes for v6.18-rc5
From: Kees Cook
Date: Thu Nov 06 2025 - 14:52:59 EST
Hi Linus,
Please pull these hardening fixes for v6.18-rc5. This is a work-around
for a (now fixed) corner case in the arm32 build with Clang KCFI
enabled.
Thanks!
-Kees
The following changes since commit 211ddde0823f1442e4ad052a2f30f050145ccada:
Linux 6.18-rc2 (2025-10-19 15:19:16 -1000)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.18-rc5
for you to fetch changes up to c57f5fee54dfc83ee1d7f70f7beb9410b8466e9e:
libeth: xdp: Disable generic kCFI pass for libeth_xdp_tx_xmit_bulk() (2025-10-29 20:04:55 -0700)
----------------------------------------------------------------
hardening fixes for v6.18-rc5
- Introduce __nocfi_generic for arm32 Clang (Nathan Chancellor)
----------------------------------------------------------------
Nathan Chancellor (3):
compiler_types: Introduce __nocfi_generic
ARM: Select ARCH_USES_CFI_GENERIC_LLVM_PASS
libeth: xdp: Disable generic kCFI pass for libeth_xdp_tx_xmit_bulk()
arch/Kconfig | 7 +++++++
arch/arm/Kconfig | 2 ++
include/linux/compiler_types.h | 6 ++++++
include/net/libeth/xdp.h | 2 +-
4 files changed, 16 insertions(+), 1 deletion(-)
--
Kees Cook