Re: [PATCH v2] signalfd: don't dequeue the forced fatal signals

[Kees Cook]

On Mon, 06 Apr 2026 15:37:32 +0200, Oleg Nesterov wrote:
> These signals should act like SIGKILL, in that userspace must never dequeue
> them. But as Kusaram explains, io_uring-driven signalfd_read_iter() called
> from get_signal() -> task_work_run() paths can do this before get_signal()
> has a chance to dequeue such a signal and notice SA_IMMUTABLE.
> 
> Change signalfd_poll() and signalfd_dequeue() to add pending SA_IMMUTABLE
> signals to ctx->sigmask.
> 
> [...]

Applied to for-next/hardening, thanks!

[1/1] signalfd: don't dequeue the forced fatal signals
      https://git.kernel.org/kees/c/37eadcb919b0

Take care,

-- 
Kees Cook