Re: CVE-2023-53027: erofs: fix kvcalloc() misuse with __GFP_NOFAIL

[Gao Xiang]

Hi,

On 2025/3/28 00:44, Greg Kroah-Hartman wrote:
> Description
> ===========
>
> In the Linux kernel, the following vulnerability has been resolved:
>
> erofs: fix kvcalloc() misuse with __GFP_NOFAIL
>
> As reported by syzbot [1], kvcalloc() cannot work with  __GFP_NOFAIL.
> Let's use kcalloc() instead.
>
> [1] https://lore.kernel.org/r/0000000000007796bd05f1852ec2@xxxxxxxxxx
>
> The Linux kernel CVE team has assigned CVE-2023-53027 to this issue.

I think this CVE is invalid since it was then reverted by
upstream commit 647dd2c3f0e1 ("erofs: Revert "erofs: fix kvcalloc()
misuse with __GFP_NOFAIL"")

since it's not the correct way to fix this.

The original issue was fixed by
commit e9c3cda4d86e ("mm, vmalloc: fix high order __GFP_NOFAIL
allocations") instead.

Thanks,
Gao Xiang