Go to file
Chris von Recklinghausen cbe61b95fc randomize_kstack: Improve entropy diffusion
JIRA: https://issues.redhat.com/browse/RHEL-37308
CVE: CVE-2024-35918

commit 9c573cd313433f6c1f7236fe64b9b743500c1628
Author: Kees Cook <keescook@chromium.org>
Date:   Sat Mar 9 12:24:48 2024 -0800

    randomize_kstack: Improve entropy diffusion

    The kstack_offset variable was really only ever using the low bits for
    kernel stack offset entropy. Add a ror32() to increase bit diffusion.

    Suggested-by: Arnd Bergmann <arnd@arndb.de>
    Fixes: 39218ff4c6 ("stack: Optionally randomize kernel stack offset each syscall")
    Link: https://lore.kernel.org/r/20240309202445.work.165-kees@kernel.org
    Signed-off-by: Kees Cook <keescook@chromium.org>

Signed-off-by: Chris von Recklinghausen <crecklin@redhat.com>
2024-05-31 07:04:59 -04:00
Documentation Merge: locking: Rebase locking code to v6.8 2024-05-30 09:32:42 -04:00
LICENSES LICENSES/dual/CC-BY-4.0: Git rid of "smart quotes" 2021-07-15 06:31:24 -06:00
arch Merge: Do not decrement idle task preempt count in CPU offline 2024-05-30 09:32:43 -04:00
block Merge: dm: Add missing commits and v6.8 bugfixes from upstream 2024-05-22 21:21:53 +00:00
certs integrity: PowerVM support for loading third party code signing keys 2024-02-05 19:05:32 +08:00
crypto use less confusing names for iov_iter direction initializers 2024-05-15 13:56:26 +08:00
drivers Merge: net/sched: fix false lockdep warning on qdisc root lock 2024-05-30 09:56:25 -04:00
fs Merge: Squashfs: check the inode number is not the invalid value of zero 2024-05-30 09:32:43 -04:00
include randomize_kstack: Improve entropy diffusion 2024-05-31 07:04:59 -04:00
init Revert "Merge: cgroup: Backport upstream cgroup commits up to v6.8" 2024-05-16 15:26:41 +00:00
io_uring use less confusing names for iov_iter direction initializers 2024-05-15 13:56:26 +08:00
ipc Merge: ipc/msg: mitigate the lock contention in ipc/msg 2024-05-16 13:29:40 +00:00
kernel Merge: locking: Rebase locking code to v6.8 2024-05-30 09:32:42 -04:00
lib Merge: CNB95: net/sched: update TC core to upstream v6.8 2024-05-30 09:32:38 -04:00
mm Merge: Add lpss support for LNL-M 2024-05-28 14:18:53 +00:00
net Merge: net/sched: fix false lockdep warning on qdisc root lock 2024-05-30 09:56:25 -04:00
redhat [redhat] kernel-5.14.0-457.el9 2024-05-30 11:11:41 -04:00
samples kmemleak-test: fix kmemleak_test.c build logic 2024-04-30 07:00:50 -04:00
scripts Merge: Rebase KVM common and x86 to 6.9 2024-05-30 09:32:40 -04:00
security Merge: mm: update to 6.3 2024-05-13 12:46:48 +00:00
sound Merge: ALSA: SOF: Fix audio distortion for SoundWire hardware after suspend and resume cycle 2024-05-16 13:32:10 +00:00
tools Merge: [RHEL9.5 P1] selftests: stable backport from upstream 2024-05-30 09:32:44 -04:00
usr kexec.h: add linux/kexec.h to UAPI compile-test coverage 2024-05-15 13:58:51 +08:00
virt KVM: Drop unused @may_block param from gfn_to_pfn_cache_invalidate_start() 2024-05-13 23:58:51 -04:00
.clang-format printk: Prepare for SRCU console list protection 2024-05-09 11:25:16 -04:00
.cocciconfig
.get_maintainer.conf get_maintainer.conf: Update with new location of RHMAINTAINERS 2022-01-19 14:26:16 -05:00
.get_maintainer.ignore
.gitattributes gitattributes: Remove unnecesary export restrictions 2021-08-30 10:50:35 -04:00
.gitignore kbuild: Cleanup DT Overlay intermediate files as appropriate 2024-03-15 14:47:39 -05:00
.gitlab-ci.yml gitlab-ci: allow coverage template to disable debug builds again 2024-04-09 14:39:33 +02:00
.mailmap mailmap: remove my redhat.com address from RHEL9's .mailmap file 2022-09-26 09:34:38 -04:00
COPYING
CREDITS MAINTAINERS: Drop Gustavo Pimentel as PCI DWC Maintainer 2024-05-13 15:56:48 -06:00
Kbuild
Kconfig Introduce CONFIG_RH_DISABLE_DEPRECATED 2021-08-30 10:50:55 -04:00
Kconfig.redhat redhat: kABI: add missing RH_KABI_SIZE_ALIGN_CHECKS Kconfig option 2024-01-12 14:27:16 +01:00
MAINTAINERS Merge: CNB95: net/sched: update TC core to upstream v6.8 2024-05-30 09:32:38 -04:00
Makefile Merge: arm64: efi: enable generic EFI compressed boot 2024-05-16 13:22:22 +00:00
Makefile.rhelver [redhat] kernel-5.14.0-457.el9 2024-05-30 11:11:41 -04:00
README
makefile redhat: Change Makefile target names to dist- 2021-08-30 10:50:11 -04:00

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.