From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id F17573EDAA7; Wed, 20 May 2026 14:31:45 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1779287507; cv=none; b=UgzV7sZe5Z50BtKAGU0+iOkGyO3Mqa158nnePYkZAAodoWDquUYaaG3spNkKiFxhHcq9tt4vsSfYnQWBruln+WIkIqxQAzq4YnO/femGs6rCRcX/MSLcJbL52bKb/c8En8i1a2VmHKsn48ZakdHeDLUO3nfssF0nZSPf6c5WV5Q= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1779287507; c=relaxed/simple; bh=W6SayE5aVoIzZ3A++FC2ibv9iTntNnzWRBYYXewEc3o=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=r4qEdxfq/FMKXwNM3sQ3wUEkDCJ7ZSHwjj+4aCQBnztJkfXBU+/P2MUrzTDWo9WIbUr0F2iFp7oVZtA0HtdNr4ZLj0vtF1qeObYJFXFZlgyR2H88WKy4sRZCpC+W4kgCtc1VvMt38/WAKUcyihR02HlQpdMjqy1wm9yGDHPfQG0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=BUTse8DT; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="BUTse8DT" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 68F9E1F00893; Wed, 20 May 2026 14:31:44 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1779287505; bh=W6SayE5aVoIzZ3A++FC2ibv9iTntNnzWRBYYXewEc3o=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=BUTse8DTj/xm6YiZ2kx7xXqMNuWAtOsjigQFCKMcavjbCqYqd9Y6irNRCB+NtjHsr Y3F6kMdFCKNxtnAAvh64kpI99n/EJVVYl8xeyTNSzi2F8UzUKeNmGEnXtWtSWo9EJA a79Lcs4lnyNPFW42zhp6BCpilhDc/oQ4dZMT1upC76BoAf1dJWoCC7kD0WeSbVuTCV 5qJHmlAp5GOqR1pIj1OvSpwh3V87t5/p/5+Xc0Oo3LQj2QSTBmk3MnLZaL6YnRAeAR Hyw0utdUJAOb0SO7GN80wKygrCwy1jQ+0i5QUkZvvMue1cpLEOAmf1dozoQtfTKIx6 lB+RBr21aaIQg== From: Sasha Levin To: stable@vger.kernel.org, Pavel Begunkov Cc: Sasha Levin , Jens Axboe , Li Zetao , Robert Garcia , io-uring@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH 5.15.y] io_uring: prevent opcode speculation Date: Wed, 20 May 2026 10:31:38 -0400 Message-ID: X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260520062833.2563847-1-rob_garcia@163.com> References: <20260520062833.2563847-1-rob_garcia@163.com> Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit > From: Pavel Begunkov > > [ Upstream commit 1e988c3fe1264708f4f92109203ac5b1d65de50b ] > > sqe->opcode is used for different tables, make sure we santitise it > against speculations. [...] > [ Use req->opcode instead of opcode here. ] > Signed-off-by: Robert Garcia Thanks for the backport. Upstream 1e988c3fe126 is currently queued or present on 6.6, 6.12, 6.18 and 7.0, but it is missing from both 5.15 and 6.1 - we should not skip 6.1 when backporting a Cc:stable fix to 5.15. Could you send a matching backport for 6.1 as well? Once we have coverage from 6.1 onwards I'll queue both together. -- Thanks, Sasha