All of lore.kernel.org
 help / color / mirror / Atom feed
From: Vasily Gorbik <gor@linux.ibm.com>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Heiko Carstens <hca@linux.ibm.com>,
	Alexander Gordeev <agordeev@linux.ibm.com>,
	linux-kernel@vger.kernel.org, linux-s390@vger.kernel.org
Subject: [GIT PULL] s390 updates for 7.2-rc7
Date: Sun, 9 Aug 2026 13:24:50 +0200	[thread overview]
Message-ID: <ttji2de@ub.hpns> (raw)

Hello Linus,

please pull s390 fixes for 7.2-rc7.

Thank you,
Vasily

The following changes since commit 01476391aecef36a3b789ee844357b22fbc90665:

  s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() (2026-07-31 13:31:20 +0200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux.git tags/s390-7.2-7

for you to fetch changes up to eb363254472493e3458156fc11fd56dca92f4333:

  s390/zcrypt: Pad trailing CCA or EP11 message with zeros (2026-08-05 15:12:22 +0200)

----------------------------------------------------------------
s390 updates for 7.2-rc7

- Fix potential uninitialized memory reads and buffer overflows from
  malformed zcrypt CCA and EP11 requests by properly validating lengths
  and payloads

- Fix possible out of bounds accesses in zcrypt EP11 domain handling by
  replacing fixed payload layout assumptions with parsing ASN.1 fields
  with bounds checks

- Fix zcrypt CCA and EP11 request and reply buffer allocations missing
  required 4-byte padding, and scrub the full allocation on release

- Fix zcrypt CCA and EP11 messages leaking up to 3 uninitialized bytes
  of memory by zeroing trailing alignment padding

----------------------------------------------------------------
Harald Freudenberger (5):
      s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code
      s390/zcrypt: Improve CCA CPRB length and overflow checks
      s390/zcrypt: Improve EP11 CPRB length and overflow checks
      s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
      s390/zcrypt: Pad trailing CCA or EP11 message with zeros

 drivers/s390/crypto/zcrypt_ccamisc.c  |  20 +-
 drivers/s390/crypto/zcrypt_ep11misc.c |  16 +-
 drivers/s390/crypto/zcrypt_msgtype6.c | 364 +++++++++++++++++++++++-----------
 3 files changed, 277 insertions(+), 123 deletions(-)

             reply	other threads:[~2026-08-09 11:24 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-08-09 11:24 Vasily Gorbik [this message]
2026-08-09 13:33 ` [GIT PULL] s390 updates for 7.2-rc7 pr-tracker-bot

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=ttji2de@ub.hpns \
    --to=gor@linux.ibm.com \
    --cc=agordeev@linux.ibm.com \
    --cc=hca@linux.ibm.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-s390@vger.kernel.org \
    --cc=torvalds@linux-foundation.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.