[GIT PULL] hardening updates for v7.2-rc1

From: Kees Cook

Date: Mon Jun 15 2026 - 16:50:44 EST


Hi Linus,

Please pull these hardening updates for v7.2-rc1. Another PR will be
coming after the BPF tree lands, as it contains the removal of the last
use of "strncpy" in the kernel, at which point I'll send a PR for this
tree which removes all the strncpy implementations:
https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git/log/?h=for-v7.2/strncpy-removal

Thanks!

-Kees

The following changes since commit 7fd2df204f342fc17d1a0bfcd474b24232fb0f32:

Linux 7.1-rc2 (2026-05-03 14:21:25 -0700)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v7.2-rc1

for you to fetch changes up to 122b52f0bab007ebeb414c8280c1def17b9ed1f4:

lkdtm/powerpc: add PPC_RADIX_TLBIEL test for radix MCE validation (2026-05-21 03:21:01 -0700)

----------------------------------------------------------------
hardening updates for v7.2-rc1

- lkdtm: Add case to provoke a crash in EFI runtime services (Ard Biesheuvel)

- lkdtm: add PPC_RADIX_TLBIEL test and missed isync (Sayali Patil)

- stddef: Document designated initializer semantics for __TRAILING_OVERLAP()
(Gustavo A. R. Silva)

- strarray: drop redundant allocation, add __counted_by_ptr (Thorsten Blum)

----------------------------------------------------------------
Ard Biesheuvel (1):
lkdtm: Add case to provoke a crash in EFI runtime services

Gustavo A. R. Silva (1):
stddef: Document designated initializer semantics for __TRAILING_OVERLAP()

Sayali Patil (2):
lkdtm/powerpc: add isync after slbmte to enforce SLB update ordering
lkdtm/powerpc: add PPC_RADIX_TLBIEL test for radix MCE validation

Thorsten Blum (3):
MAINTAINERS: add kernel hardening keyword __counted_by_ptr
lib/string_helpers: drop redundant allocation in kasprintf_strarray
lib/string_helpers: annotate struct strarray with __counted_by_ptr

drivers/misc/lkdtm/Makefile | 2 +-
include/linux/stddef.h | 65 +++++++++++++++++++++++++++++++++
drivers/misc/lkdtm/core.c | 2 +-
drivers/misc/lkdtm/bugs.c | 27 ++++++++++++++
drivers/misc/lkdtm/powerpc.c | 49 +++++++++++++++++++++++++
lib/string_helpers.c | 8 ++--
MAINTAINERS | 2 +-
tools/testing/selftests/lkdtm/tests.txt | 1 +
8 files changed, 149 insertions(+), 7 deletions(-)

--
Kees Cook