Re: (subset) [PATCH v2 0/6] Fixes multiple sysctl bound checks

[Martin K. Petersen]

On Mon, 24 Feb 2025 10:58:15 +0100, nicolas.bouchinet@xxxxxxxxxxx wrote:

> This patchset adds some bound checks to sysctls to avoid negative
> value writes.
> 
> The patched sysctls were storing the result of the proc_dointvec
> proc_handler into an unsigned int data. proc_dointvec being able to
> parse negative value, and it return value being a signed int, this could
> lead to undefined behaviors.
> This has led to kernel crash in the past as described in commit
> 3b3376f222e3 ("sysctl.c: fix underflow value setting risk in vm_table")
> 
> [...]

Applied to 6.15/scsi-queue, thanks!

[4/6] sysctl: Fixes scsi_logging_level bounds
      https://git.kernel.org/mkp/scsi/c/2cef5b4472c6

-- 
Martin K. Petersen	Oracle Linux Engineering