[PATCH v2 0/3] block: zero non-PI portion of auto integrity buffer

From: Caleb Sander Mateos

Date: Thu Jan 08 2026 - 13:02:47 EST


For block devices capable of storing "opaque" metadata in addition to
protection information, ensure the opaque bytes are initialized by the
block layer's auto integrity generation. Otherwise, the contents of
kernel memory can be leaked via the storage device.
Two follow-on patches simplify the bio_integrity_prep() code a bit.

v2:
- Clarify commit message (Christoph)
- Split gfp_t cleanup into separate patch (Christoph)
- Add patch simplifying bi_offload_capable()
- Add Reviewed-by tag

Caleb Sander Mateos (3):
block: zero non-PI portion of auto integrity buffer
block: replace gfp_t with bool in bio_integrity_prep()
block: use pi_tuple_size in bi_offload_capable()

block/bio-integrity-auto.c | 25 +++++++------------------
1 file changed, 7 insertions(+), 18 deletions(-)

--
2.45.2