Re: [PATCH 6.1.y 0/2] Backport to fix CVE-2024-36478

[Xiangyu Chen <xiangyu.chen@xxxxxxxxxxxxxxxxx>]

Hi,

On 11/19/24 16:35, Yu Kuai wrote:
> CAUTION: This email comes from a non Wind River email account!
> Do not click links or open attachments unless you recognize the sender 
> and know the content is safe.
>
> Hi,
>
> 在 2024/11/19 16:27, Xiangyu Chen 写道:
> > From: Xiangyu Chen <xiangyu.chen@xxxxxxxxxxxxx>
> >
> > Backport to fix CVE-2024-36478
> >
> > https://lore.kernel.org/linux-cve-announce/2024062136-CVE-2024-36478-d249@gregkh/ 
> >
> >
> > The CVE fix is "null_blk: fix null-ptr-dereference while configuring 
> > 'power'
> > and 'submit_queues'"
> >
> > This required 1 extra commit to make sure the picks are clean:
> > null_blk: Remove usage of the deprecated ida_simple_xx() API
> >
> >
> > Christophe JAILLET (1):
> >    null_blk: Remove usage of the deprecated ida_simple_xx() API
> >
> > Yu Kuai (1):
> >    null_blk: fix null-ptr-dereference while configuring 'power' and
> >      'submit_queues'
>
> Thanks for backporing the patch, there is a follow up patch you should
> pick together:
>
> https://lore.kernel.org/all/20240527043445.235267-1-dlemoal@xxxxxxxxxx/
Thanks for your info, I'll submit a V2 patch later.


Br,

Xiangyu

> Thanks,
> Kuai
>
> >   drivers/block/null_blk/main.c | 44 ++++++++++++++++++++++-------------
> >   1 file changed, 28 insertions(+), 16 deletions(-)