This is a note to let you know that I've just added the patch titled
fs/cramfs/inode.c: initialize file_ra_state
to the 6.1-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
fs-cramfs-inode.c-initialize-file_ra_state.patch
and it can be found in the queue-6.1 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From 3e35102666f873a135d31a726ac1ec8af4905206 Mon Sep 17 00:00:00 2001
From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
Date: Sun, 26 Feb 2023 12:31:11 -0800
Subject: fs/cramfs/inode.c: initialize file_ra_state
From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
commit 3e35102666f873a135d31a726ac1ec8af4905206 upstream.
file_ra_state_init() assumes that the file_ra_state has been zeroed out.
Fixes a KMSAN used-unintialized issue (at least).
Fixes: cf948cbc35e80 ("cramfs: read_mapping_page() is synchronous")
Reported-by: syzbot <syzbot+8ce7f8308d91e6b8bbe2@xxxxxxxxxxxxxxxxxxxxxxxxx>
Link: https://lkml.kernel.org/r/0000000000008f74e905f56df987@xxxxxxxxxx
Cc: Matthew Wilcox <willy@xxxxxxxxxxxxx>
Cc: Nicolas Pitre <nico@xxxxxxxxxxx>
Cc: <stable@xxxxxxxxxxxxxxx>
Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
fs/cramfs/inode.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/fs/cramfs/inode.c b/fs/cramfs/inode.c
index e3d168911dbe..006ef68d7ff6 100644
--- a/fs/cramfs/inode.c
+++ b/fs/cramfs/inode.c
@@ -183,7 +183,7 @@ static void *cramfs_blkdev_read(struct super_block *sb, unsigned int offset,
unsigned int len)
{
struct address_space *mapping = sb->s_bdev->bd_inode->i_mapping;
- struct file_ra_state ra;
+ struct file_ra_state ra = {};
struct page *pages[BLKS_PER_BUF];
unsigned i, blocknr, buffer;
unsigned long devsize;
--
2.39.2
Patches currently in stable-queue which might be from akpm@xxxxxxxxxxxxxxxxxxxx are
queue-6.1/fs-hfsplus-fix-uaf-issue-in-hfsplus_put_super.patch
queue-6.1/fs-cramfs-inode.c-initialize-file_ra_state.patch
queue-6.1/genirq-fix-the-return-type-of-kstat_cpu_irqs_sum.patch
queue-6.1/hfs-fix-missing-hfs_bnode_get-in-__hfs_bnode_create.patch
queue-6.1/objtool-add-uaccess-exceptions-for-__tsan_volatile_r.patch
queue-6.1/uaccess-add-minimum-bounds-check-on-kernel-buffer-si.patch
queue-6.1/ocfs2-fix-non-auto-defrag-path-not-working-issue.patch
queue-6.1/ocfs2-fix-defrag-path-triggering-jbd2-assert.patch
queue-6.1/rdma-siw-remove-foll_force-usage.patch
queue-6.1/sparc-allow-pm-configs-for-sparc32-compile_test.patch
