Re: [PATCH] arm64: mm: validate /dev/mem mmap ranges without overflow

[Catalin Marinas]

On Mon, 02 Nov 2026 01:10:30 +0800, Zhao Gongyi wrote:
> An arm64 syzkaller reproducer creates a FUSE character device with
> major:minor 1:1, so opening it uses the /dev/mem file operations. It
> maps one page from offset 0xfffffffffffff000 at user address zero.
> The next openat() with a NULL pathname triggers a synchronous external
> abort (SEA, ESR 0x96000010) in strncpy_from_user() via do_getname(),
> panicking the kernel.
> 
> [...]

Applied to arm64 (for-next/fixes), thanks!

[1/1] arm64: mm: validate /dev/mem mmap ranges without overflow
      https://git.kernel.org/arm64/c/b0958b1397fb