On 14. 11. 19, 22:27, Kees Cook wrote: > On Tue, Nov 12, 2019 at 01:21:54PM -0800, Kees Cook wrote: >> How is iucv the only network protocol that has run into this? Do others >> use a bounce buffer? > > Another solution would be to use a dedicated kmem cache (instead of the > shared kmalloc dma one)? Has there been any conclusion to this thread yet? For the time being, we disabled HARDENED_USERCOPY on s390... https://lore.kernel.org/kernel-hardening/9519edb7-456a-a2fa-659e-3e5a1ff89466@xxxxxxx/ thanks, -- js suse labs
