Re: [PATCH v8 2/2] misc: ibmasm: Fix dynamic out-of-bounds MMIO access via malicious MFA

From: Mingyu Wang

Date: Fri Jul 31 2026 - 10:05:30 EST


Hi Greg,

Ah, this is I2O hardware. Wow, I don't think that's even around
anymore, is it? Do you have access to it to test this?

You are spot on—the hardware is ancient, and I do not have access
to a physical device.

We tested this exclusively in our virtual device fuzzing framework.
By modeling basic PCI/I2O memory interactions in QEMU, the fuzzer
injected a malformed MFA (Message Frame Address), triggering the
OOB access. The patch was verified to block the malicious MFA
within that emulated environment.

Given how old this driver is, if the community decides it is better
to remove the driver entirely rather than maintain patches for
emulated edge cases, I completely understand.

Best regards,
Mingyu Wang