[GIT PULL] hardening updates for v7.1-rc1
From: Kees Cook
Date: Mon Apr 13 2026 - 19:21:52 EST
Hi Linus,
Please pull these hardening updates for v7.1-rc1.
Thanks!
-Kees
The following changes since commit 11439c4635edd669ae435eec308f4ab8a0804808:
Linux 7.0-rc2 (2026-03-01 15:39:31 -0800)
are available in the Git repository at:
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v7.1-rc1
for you to fetch changes up to cf2f06f7152d5e38a87aa2e9b8b452714789f6ba:
lkdtm/fortify: Drop unneeded FORTIFY_STR_OBJECT test (2026-03-31 16:53:47 -0700)
----------------------------------------------------------------
hardening updates for v7.1-rc1
- randomize_kstack: Improve implementation across arches (Ryan Roberts)
- lkdtm/fortify: Drop unneeded FORTIFY_STR_OBJECT test
- refcount: Remove unused __signed_wrap function annotations
----------------------------------------------------------------
Kees Cook (2):
refcount: Remove unused __signed_wrap function annotations
lkdtm/fortify: Drop unneeded FORTIFY_STR_OBJECT test
Ryan Roberts (2):
randomize_kstack: Maintain kstack_offset per task
randomize_kstack: Unify random source across arches
arch/Kconfig | 5 ++-
arch/s390/include/asm/entry-common.h | 8 -----
arch/x86/include/asm/entry-common.h | 12 --------
include/linux/compiler_types.h | 9 +-----
include/linux/randomize_kstack.h | 54 ++++++++++++---------------------
include/linux/refcount.h | 10 +++---
arch/arm64/kernel/syscall.c | 11 -------
arch/loongarch/kernel/syscall.c | 11 -------
arch/powerpc/kernel/syscall.c | 16 ++--------
arch/riscv/kernel/traps.c | 12 --------
arch/s390/kernel/syscall.c | 2 +-
arch/x86/entry/syscall_32.c | 4 +--
arch/x86/entry/syscall_64.c | 2 +-
drivers/misc/lkdtm/fortify.c | 36 ++++------------------
init/main.c | 9 +++++-
kernel/fork.c | 1 +
tools/testing/selftests/lkdtm/tests.txt | 1 -
17 files changed, 49 insertions(+), 154 deletions(-)
--
Kees Cook