From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.emea.novell.com ([130.57.118.101]:58941 "EHLO mail.emea.novell.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751031AbbGMPIG (ORCPT ); Mon, 13 Jul 2015 11:08:06 -0400 From: Matthias Brugger To: stable@vger.kernel.org Reply-To: mbrugger@suse.com Cc: Will Deacon , Yann Droneaud Subject: arm64/mm: Remove hack in mmap randomize layout Date: Mon, 13 Jul 2015 17:07:54 +0200 Message-ID: <5009675.v9gvjRB4Io@ubix> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" Sender: stable-owner@vger.kernel.org List-ID: Hi all, Commit d6c763afab14 "arm64/mm: Remove hack in mmap randomize layout" fixes a security issue which reduces the entropy for mmap base address by half [1]. A attempt to guess where the stack is mapped via brute-force needs just half the attempts. I found this patch was added to v3.19-rc1 but should be added as well to: v3.18, v3.14, v3.12 and v3.10 Best regards, Matthias Brugger [1] http://hmarco.org/bugs/linux-ASLR-reducing-mmap-by-half.html