Re: CVE-2023-39191 - Dynptr fixes - reg.

Shung-Hsi Yu
2023-10-31T07:58:02Z

On Tue, Oct 31, 2023 at 07:05:56AM +0000, Nandhini Rengaraj wrote:
> Hi,
> This is marked as a fix for CVE-2023-39191. Does this vulnerability also affect dynptr in stable kernel v6.1? If so, would you please be able to help us backport the fix to stable kernel v6.1?

I have not work with v6.1, only our distro kernel based on an earlier kernel
(which requires more tweaking since it doesn't have user ringbuf).

Regarding backport to v6.1, this series depends on the "Dynptr
refactorings" series[0]; once that's backported this series should apply
relatively cleanly.

Shung-Hsi

0: https://lore.kernel.org/bpf/20221207204141.308952-1-memxor@gmail.com/

> Thank you,
> Nandhini Rengaraj