On Thu, May 27, 2021 at 08:37:20PM +0300, Ovidiu Panait wrote: > This patchset is based on Frank van der Linden's backport of CVE-2021-29155 > fixes to 5.4 and 4.14: > https://lore.kernel.org/stable/20210429220839.15667-1-fllinden@xxxxxxxxxx/ > https://lore.kernel.org/stable/20210501043014.33300-1-fllinden@xxxxxxxxxx/ > > With this series, all verifier selftests but one (that has already been > failing, see [1] for more details) succeed. Thanks for doing this - when this gets queued up for 4.19, I can then resubmit my 4.14 series. Daniel mentioned the CVE-2021-33200 fixes that were just added. If you add them to this series, I'll add them to the 4.14 series as well. They should be clean cherry-picks on top of this. The failing selftest is a little odd - why would it need allowing bounded loops to succeed if it was written before those were allowed? In any case, it was already failing, so that shouldn't stop this series from being applied. - Frank