[STABLE] Backport requests for net/crypto fixes

[STABLE] Backport requests for net/crypto fixes

[Yuan Tan]

[STABLE] Backport requests for net/crypto fixes

Hi Linux stable team,

Please consider backporting the following 3 upstream bug fixing commits to
the relevant stable trees. After my inspection, they have not been
backported.

I am grouping these requests together for convenience. If you would prefer
that I send one backport request per email, please let me know. 

MAINLINE_COMMIT                               MERGED_TO_MAINLINE_AT         TITLE
629ec78ef8608d955ce217880cdc3e1873af3a15    2026-04-02T09:57:06-07:00    mpls: add seqcount to protect the platform_label{,s} pair
426c355742f02cf743b347d9d7dbdc1bfbfa31ef    2026-04-09T08:39:25-07:00    net: af_key: zero aligned sockaddr tail in PF_KEY exports
01d798e9feb30212952d4e992801ba6bd6a82351    2026-04-15T15:22:26-07:00    crypto: jitterentropy - replace long-held spinlock with mutex

Please let me know if you need any further information.

Thanks,
Yuan

Re: [STABLE] Backport requests for net/crypto fixes

[Greg KH]

On Wed, May 06, 2026 at 11:07:50PM -0700, Yuan Tan wrote:
> [STABLE] Backport requests for net/crypto fixes
> 
> Hi Linux stable team,
> 
> Please consider backporting the following 3 upstream bug fixing commits to
> the relevant stable trees. After my inspection, they have not been
> backported.
> 
> I am grouping these requests together for convenience. If you would prefer
> that I send one backport request per email, please let me know. 
> 
> MAINLINE_COMMIT                               MERGED_TO_MAINLINE_AT         TITLE
> 629ec78ef8608d955ce217880cdc3e1873af3a15    2026-04-02T09:57:06-07:00    mpls: add seqcount to protect the platform_label{,s} pair
> 426c355742f02cf743b347d9d7dbdc1bfbfa31ef    2026-04-09T08:39:25-07:00    net: af_key: zero aligned sockaddr tail in PF_KEY exports

These both are in stable releases, what specific tree(s) do you want it
in?

> 01d798e9feb30212952d4e992801ba6bd6a82351    2026-04-15T15:22:26-07:00    crypto: jitterentropy - replace long-held spinlock with mutex

What kernel tree(s) do you want this in?  Why was this not tagged for
stable already?

thanks,

greg k-h

Re: [STABLE] Backport requests for net/crypto fixes

[Yuan Tan]

On Thu, May 7, 2026 at 2:23 AM Greg KH <gregkh@linuxfoundation.org> wrote:
>
> On Wed, May 06, 2026 at 11:07:50PM -0700, Yuan Tan wrote:
> > [STABLE] Backport requests for net/crypto fixes
> >
> > Hi Linux stable team,
> >
> > Please consider backporting the following 3 upstream bug fixing commits to
> > the relevant stable trees. After my inspection, they have not been
> > backported.
> >
> > I am grouping these requests together for convenience. If you would prefer
> > that I send one backport request per email, please let me know.
> >
> > MAINLINE_COMMIT                               MERGED_TO_MAINLINE_AT         TITLE
> > 629ec78ef8608d955ce217880cdc3e1873af3a15    2026-04-02T09:57:06-07:00    mpls: add seqcount to protect the platform_label{,s} pair
> > 426c355742f02cf743b347d9d7dbdc1bfbfa31ef    2026-04-09T08:39:25-07:00    net: af_key: zero aligned sockaddr tail in PF_KEY exports
>
> These both are in stable releases, what specific tree(s) do you want it
> in?

Regarding "mpls: add seqcount to protect the platform_label{,s} pair":
Both 6.12.y and 6.18.y are affected. However, our testing shows that
backporting results in code conflicts. We can send the resolved
patches later.

Regarding "net: af_key: zero aligned sockaddr tail in PF_KEY exports":
Our testing shows that the mainline patch can be backported to 6.12.y
and 6.18.y cleanly without any conflicts.

>
> > 01d798e9feb30212952d4e992801ba6bd6a82351    2026-04-15T15:22:26-07:00    crypto: jitterentropy - replace long-held spinlock with mutex
>
> What kernel tree(s) do you want this in?  Why was this not tagged for
> stable already?

We have re-evaluated this bug and concluded that it requires root
privileges to trigger and has no security impact. Therefore, it does
not need to be backported.

Apologies for the confusion; we will improve our process next time.

>
> thanks,
>
> greg k-h

Re: [STABLE] Backport requests for net/crypto fixes

[Sasha Levin]

> 2) 426c355742f0 ("net: af_key: zero aligned sockaddr tail in PF_KEY
>    exports") - targets 6.12.y and 6.18.y; cherry-pick is clean.

Queued for 6.12.y and 6.18.y, thanks.

> 1) 629ec78ef860 (mpls seqcount) - cherry-pick conflicts on 6.12/6.18;
>    I'll send manually-resolved patches later.

Sounds good, will look out for the resolved versions.

--
Thanks,
Sasha