On Mon, 24 Feb 2025 10:58:15 +0100, nicolas.bouchinet@xxxxxxxxxxx wrote:
> This patchset adds some bound checks to sysctls to avoid negative
> value writes.
>
> The patched sysctls were storing the result of the proc_dointvec
> proc_handler into an unsigned int data. proc_dointvec being able to
> parse negative value, and it return value being a signed int, this could
> lead to undefined behaviors.
> This has led to kernel crash in the past as described in commit
> 3b3376f222e3 ("sysctl.c: fix underflow value setting risk in vm_table")
>
> [...]
Applied to 6.15/scsi-queue, thanks!
[4/6] sysctl: Fixes scsi_logging_level bounds
https://git.kernel.org/mkp/scsi/c/2cef5b4472c6
--
Martin K. Petersen Oracle Linux Engineering
