From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id BD947C77B7A for ; Wed, 7 Jun 2023 18:00:17 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232417AbjFGSAQ (ORCPT ); Wed, 7 Jun 2023 14:00:16 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:51066 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230150AbjFGSAP (ORCPT ); Wed, 7 Jun 2023 14:00:15 -0400 Received: from dfw.source.kernel.org (dfw.source.kernel.org [IPv6:2604:1380:4641:c500::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id BCB741FDB; Wed, 7 Jun 2023 11:00:13 -0700 (PDT) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dfw.source.kernel.org (Postfix) with ESMTPS id 441C66396D; Wed, 7 Jun 2023 18:00:13 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 21B52C433EF; Wed, 7 Jun 2023 18:00:11 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1686160812; bh=itM0kSXkj6+4/f+xa5PVjPgEfM6gGeCKb7f2+MUzyBU=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=NouFUiyxEU814hiT29TpRKZjdun7PPHOw8DIiBTnIUh1ELmgGEQl5qQjaEku4+gyw C2BfGffb8S00rF+DcT70h/ljVQKEou61WOMA3Us5heF4d91eaM0LSrRyI4A/Zt0MrU 4F1KHGqFd+ZCBaQcPwprCOtJLjQlAprPZAqzG9iI= Date: Wed, 7 Jun 2023 20:00:09 +0200 From: Greg Kroah-Hartman To: Ben Hutchings Cc: Sasha Levin , stable , Arnd Bergmann , linux-scsi , security@kernel.org Subject: Re: dpt_i2o fixes for stable Message-ID: <2023060702-anemic-grinch-0d3e@gregkh> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: linux-scsi@vger.kernel.org On Sat, May 27, 2023 at 10:42:00PM +0200, Ben Hutchings wrote: > I'm proposing to address the most obvious issues with dpt_i2o on stable > branches. At this stage it may be better to remove it as has been done > upstream, but I'd rather limit the regression for anyone still using > the hardware. > > The changes are: > > - "scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)", > which closes security flaws including CVE-2023-2007. > - "scsi: dpt_i2o: Do not process completions with invalid addresses", > which removes the remaining bus_to_virt() call and may slightly > improve handling of misbehaving hardware. > > These changes have been compiled on all the relevant stable branches, > but I don't have hardware to test on. All now queued up, thanks. greg k-h