Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kernel-source-longterm for openSUSE:Factory checked in at 2026-07-28 17:49:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kernel-source-longterm (Old) and /work/SRC/openSUSE:Factory/.kernel-source-longterm.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kernel-source-longterm" Tue Jul 28 17:49:17 2026 rev:135 rq:1367937 version:6.18.40 Changes: -------- --- /work/SRC/openSUSE:Factory/kernel-source-longterm/kernel-longterm.changes 2026-07-23 23:08:53.357225292 +0200 +++ /work/SRC/openSUSE:Factory/.kernel-source-longterm.new.2004/kernel-longterm.changes 2026-07-28 17:49:40.419193254 +0200 @@ -1,0 +2,2901 @@ +Fri Jul 24 18:22:56 CEST 2026 - [email protected] + +- usb: atm: ueagle-atm: reject descriptors that confuse probe + and disconnect (git-fixes). +- commit 916da6c + +------------------------------------------------------------------- +Fri Jul 24 17:19:01 CEST 2026 - [email protected] + +- Linux 6.18.40 (bsc#1258210). +- perf strlist: Don't write to const memory (bsc#1258210). +- perf strlist: Remove dont_dupstr logic, used only once + (bsc#1258210). +- perf time-utils: Constify variables storing the result of + strchr() on const tables (bsc#1258210). +- perf jitdump: Constify variables storing the result of strchr() + on const tables (bsc#1258210). +- perf list: Remove unused 'sep' variable (bsc#1258210). +- perf tools: Switch printf("...%s", strerror(errno)) to + printf("...%m") (bsc#1258210). +- perf bpf-event: Constify variables storing the result of strchr() + on const tables (bsc#1258210). +- perf session: Don't write to memory pointed to a const pointer + (bsc#1258210). +- perf demangle-java: Constify variables storing the result of + strchr() on const tables (bsc#1258210). +- perf trace-event: Constify variables storing the result of + strchr() on const tables (bsc#1258210). +- perf metricgroup: Constify variables storing the result of + strchr() on const tables (bsc#1258210). +- perf tools: Use const for variables receiving str{str,r?chr}() + returns (bsc#1258210). +- perf hwmon_pmu: Constify the variables returning bsearch() + on const tables (bsc#1258210). +- perf units: Constify variables storing the result of strchr() + on const tables (bsc#1258210). +- perf tp_pmu: Address const-correctness errors in recent glibcs + (bsc#1258210). +- perf list: Signal changing const memory is ok (bsc#1258210). +- perf list: Don't write to const memory (bsc#1258210). +- perf diff: Constify strchr() return variables (bsc#1258210). +- perf trace: Don't change const char strings (bsc#1258210). +- perf trace: Deal with compiler const checks (bsc#1258210). +- nvme-pci: DMA unmap the correct regions in nvme_free_sgls + (bsc#1258210). +- smb/server: do not require delete access for non-replacing links + (bsc#1258210). +- tcp: Add preempt_{disable,enable}_nested() in + reqsk_queue_hash_req() (bsc#1258210). +- crypto: algif_skcipher - force synchronous processing + (bsc#1258210). +- KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU + (bsc#1258210). +- iommu/vt-d: Clear Present bit before tearing down scalable-mode + context entry (bsc#1258210). +- nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest + error path (bsc#1258210). +- nvmet-tcp: Fix potential UAF when ddgst mismatch (bsc#1258210). +- crypto: sun4i-ss - Remove insecure and unused rng_alg + (bsc#1258210). +- media: uvcvideo: Fix deadlock if uvc_status_stop is called + from async_ctrl.work (bsc#1258210). +- selftests: bpf: Add test for multiple syncs from linked register + (bsc#1258210). +- selftests/bpf: Add tests for improved linked register tracking + (bsc#1258210). +- selftests/bpf: Add a test cases for sync_linked_regs regarding + zext propagation (bsc#1258210). +- bpf: Clear delta when clearing reg id for non-{add,sub} ops + (bsc#1258210). +- selftests/bpf: Add tests for delta tracking when src_reg == + dst_reg (bsc#1258210). +- selftests/bpf: Add tests for stale delta leaking through id + reassignment (bsc#1258210). +- exfat: preserve benign secondary entries during rename and move + (bsc#1258210). +- iommu/amd: Use maximum Event log buffer size when SNP is + enabled on Family 0x19 (bsc#1258210). +- iommu/amd: Use maximum PPR log buffer size when SNP is enabled + on Family 0x19 (bsc#1258210). +- af_unix: Drop all SCM attributes for SOCKMAP (bsc#1258210). +- ALSA: hda/realtek: Add quirk for TongFang X6xx45xU (bsc#1258210). +- ALSA: hda: conexant: Remove mic bias threshold override + (bsc#1258210). +- ALSA: hda: Fix cached processing coefficient verbs (bsc#1258210). +- ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with + codec SSID 17aa:38a7 (bsc#1258210). +- media: uvcvideo: Use hw timestaming if the clock buffer is full + (bsc#1258210). +- media: uvcvideo: Avoid partial metadata buffers (bsc#1258210). +- media: uvcvideo: Fix buffer sequence in frame gaps (bsc#1258210). +- media: uvcvideo: Fix dev_sof filtering in hw timestamp + (bsc#1258210). +- media: uvcvideo: Do not add clock samples with small sof delta + (bsc#1258210). +- media: uvcvideo: Relax the constrains for interpolating the + hw clock (bsc#1258210). +- media: uvcvideo: Fix sequence number when no EOF (bsc#1258210). +- dt-bindings: media: sun4i-a10-video-engine: Add interconnect + properties (bsc#1258210). +- dt-bindings: power: imx93: Add MIPI PHY power domain + (bsc#1258210). +- serial: msm: Disable DMA for kernel console UART (bsc#1258210). +- serial: max310x: implement gpio_chip::get_direction() + (bsc#1258210). +- serial: 8250_omap: clear rx_running on zero-length DMA completes + (bsc#1258210). +- rxrpc: serialize kernel accept preallocation with socket teardown + (bsc#1258210). +- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc + (bsc#1258210). +- rxrpc: Don't move a peeked OOB message onto the pending queue + (bsc#1258210). +- rxrpc: Fix UAF in rxgk_issue_challenge() (bsc#1258210). +- rxrpc: Fix socket notification race (bsc#1258210). +- rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) + (bsc#1258210). +- rxrpc: Fix potential infinite loop in rxrpc_recvmsg() + (bsc#1258210). +- rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something + to rotate (bsc#1258210). +- rxrpc: Fix oob challenge leak in cleanup after notification + failure (bsc#1258210). +- rxrpc: Fix ACKALL packet handling (bsc#1258210). +- rxrpc: Fix the reception of a reply packet before data + transmission (bsc#1258210). +- rxrpc: Fix leak of connection from OOB challenge (bsc#1258210). +- rxrpc: Fix double unlock in rxrpc_recvmsg() (bsc#1258210). +- afs: Fix netns teardown to cancel the preallocation charger + (bsc#1258210). +- afs: fix NULL pointer dereference in afs_get_tree() + (bsc#1258210). +- afs: handle CB.InitCallBackState3 requests without a server + record (bsc#1258210). +- afs: Fix further netns teardown to cancel the preallocation + charger (bsc#1258210). +- afs: Fix uncancelled rxrpc OOB message handler (bsc#1258210). +- fbcon: fix NULL pointer dereference for a console without + vc_data (bsc#1258210). +- fbcon: Use correct type for vc_resize() return value + (bsc#1258210). +- openrisc: mm: Fix section mismatch between map_page and + __set_fixmap (bsc#1258210). +- clocksource/drivers/sun5i: Handle error returns from + devm_reset_control_get_optional_exclusive() (bsc#1258210). +- accel/amdxdna: Fix leak when pinning ubuf pages (bsc#1258210). +- drm/rockchip: dw_dp: Switch to drmm_kzalloc() (bsc#1258210). +- drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() + (bsc#1258210). +- drm/rockchip: Test for imported buffers with + drm_gem_is_imported() (bsc#1258210). +- drm/tidss: Drop extra drm_mode_config_reset() call (bsc#1258210). +- drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating + SVM ranges (bsc#1258210). +- drm/gpuvm: Do not prepare NULL objects (bsc#1258210). +- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() + (bsc#1258210). +- drm/radeon: fix integer overflow in radeon_align_pitch() + (bsc#1258210). +- drm/radeon: fix memory leak in radeon_ring_restore() on lock + failure (bsc#1258210). +- libbpf: Report error when a negative kprobe offset is specified + (bsc#1258210). +- selftests/bpf: Fix off-by-one in bpf_cpumask_populate related + selftest (bsc#1258210). +- dt-bindings: timer: Remove sifive,fine-ctr-bits property + (bsc#1258210). +- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR + macro (bsc#1258210). +- selftests/bpf: Use local type for flow_offload_tuple_rhash in + xdp_flowtable (bsc#1258210). +- selftests/bpf: Use local type for bpf_fou_encap in + test_tunnel_kern (bsc#1258210). +- Documentation: proc: fix section numbering in table of contents + (bsc#1258210). +- arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra + (bsc#1258210). +- arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S + (bsc#1258210). +- arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings + (bsc#1258210). +- arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning + (bsc#1258210). +- arm64: dts: qcom: sdm845-mezzanine: Fix camss ports + unit_address_vs_reg warning (bsc#1258210). +- wifi: cfg80211: fix grammar in MLO group key error message + (bsc#1258210). +- arm64: tegra: Fix Tegra234 MGBE PTP clock (bsc#1258210). +- dt-bindings: pinctrl: nvidia,tegra234: Add missing required + block (bsc#1258210). +- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc + (bsc#1258210). +- driver core: use READ_ONCE() for dev->driver in + dev_has_sync_state() (bsc#1258210). +- wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers + (bsc#1258210). +- wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers + (bsc#1258210). +- wifi: rtw89: Correct data type for scan index to avoid infinite + loop (bsc#1258210). +- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding + DMA buffer (bsc#1258210). +- wifi: rtw89: add bounds check on firmware mac_id in link lookup + (bsc#1258210). +- kconfig: fix potential NULL pointer dereference in conf_askvalue + (bsc#1258210). +- soc: xilinx: Shutdown and free rx mailbox channel (bsc#1258210). +- pinctrl: mediatek: eint: Drop base from + mtk_eint_chip_write_mask() (bsc#1258210). +- wifi: ath9k: fix OOB access from firmware tx status queue ID + (bsc#1258210). +- ARM: dts: am335x-sl50: Fix audio bitclock and frame master + endpoint (bsc#1258210). +- Documentation/rv: Replace stale website link (bsc#1258210). +- watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH + (bsc#1258210). +- watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and + SAMA7G5 (bsc#1258210). +- watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on + register failure (bsc#1258210). +- media: cedrus: Fix failure to clean up hardware on probe failure + (bsc#1258210). +- media: v4l2-common: Add YUV24 format info (bsc#1258210). +- memory: tegra: Wire up system sleep PM ops (bsc#1258210). +- crypto: qat - fix heartbeat error injection (bsc#1258210). +- lib/vsprintf: Fix to check field_width and precision + (bsc#1258210). +- dts: spacemit: set console baud rate on bpif3 (bsc#1258210). +- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() + error path (bsc#1258210). +- dt-bindings: vendor-prefixes: Add Displaytech Ltd (bsc#1258210). +- drm/gpuvm: take refcount on DRM device (bsc#1258210). +- drm/panel: Clean up S6E3HA2 config dependencies and fill help + text (bsc#1258210). +- ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based + /firmware (bsc#1258210). +- arm64: dts: rockchip: Add #{address,size}-cells to Chromium-based + /firmware (bsc#1258210). +- arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc + (bsc#1258210). +- arm64: dts: imx8x-colibri: Correct SODIMM PAD settings + (bsc#1258210). +- Revert "arm64: dts: imx8mm-kontron: Add support for reading + SD_VSEL signal" (bsc#1258210). +- Revert "arm64: dts: imx8mp-kontron: Add support for reading + SD_VSEL signal" (bsc#1258210). +- vxlan: Fix potential null-ptr-deref in + vxlan_gro_prepare_receive() (bsc#1258210). +- drm: renesas: rz-du: mipi_dsi: Fix return path on error + (bsc#1258210). +- alarmtimer: Remove stale return description from + alarm_handle_timer() (bsc#1258210). +- OPP: Fix race between OPP addition and lookup (bsc#1258210). +- crypto: ccp - Reverse the cleanup order in psp_dev_destroy() + (bsc#1258210). +- crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one + (bsc#1258210). +- crypto: atmel-sha204a - fix blocking and non-blocking rng logic + (bsc#1258210). +- crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve + (bsc#1258210). +- crypto: asymmetric_keys - fix OOB read in + pefile_digest_pe_contents (bsc#1258210). +- ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD + (bsc#1258210). +- dlm: fix add msg handle in send_queue ordered (bsc#1258210). +- nilfs2: fix backing_dev_info reference leak (bsc#1258210). +- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite + (bsc#1258210). +- media: iris: scale MMCX power domain on SM8250 (bsc#1258210). +- media: venus: scale MMCX power domain on SM8250 (bsc#1258210). +- iommu/amd: Fix a stale comment about which legacy mode is user + visible (bsc#1258210). +- soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost + during merge (bsc#1258210). +- bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative + dentries (bsc#1258210). +- uaccess: fix ignored_trailing logic in copy_struct_to_user() + (bsc#1258210). +- arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce + buffer to host (bsc#1258210). +- rust: alloc: fix `Vec::extend_with` SAFETY comment (bsc#1258210). +- clk: scmi: Fix clock rate rounding (bsc#1258210). +- arm64: dts: qcom: kodiak: Fix ICE reg size (bsc#1258210). +- arm64: dts: qcom: sm8450: Fix ICE reg size (bsc#1258210). +- drm/hisilicon/hibmc: add updating link cap in DP detect() + (bsc#1258210). +- drm/hisilicon/hibmc: fix no showing when no connectors connected + (bsc#1258210). +- drm/hisilicon/hibmc: move display contrl config to hibmc_probe() + (bsc#1258210). +- drm/hisilicon/hibmc: use clock to look up the PLL value + (bsc#1258210). +- evm: terminate and bound the evm_xattrs read buffer + (bsc#1258210). +- thermal: hwmon: Fix critical temperature attribute removal + (bsc#1258210). ++++ 2604 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/kernel-source-longterm/kernel-longterm.changes ++++ and /work/SRC/openSUSE:Factory/.kernel-source-longterm.new.2004/kernel-longterm.changes kernel-source-longterm.changes: same change kernel-syms-longterm.changes: same change ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kernel-longterm.spec ++++++ --- /var/tmp/diff_new_pack.ZKzI1q/_old 2026-07-28 17:49:52.391611891 +0200 +++ /var/tmp/diff_new_pack.ZKzI1q/_new 2026-07-28 17:49:52.403612311 +0200 @@ -18,8 +18,8 @@ %define srcversion 6.18 -%define patchversion 6.18.39 -%define git_commit a451fc682fdebd4acac24471de2d126313623467 +%define patchversion 6.18.40 +%define git_commit ced0b56c4d8cbd409eb8f683b5773f330c91cbed %define variant -longterm%{nil} %define compress_modules zstd %define compress_vmlinux xz @@ -40,9 +40,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-longterm -Version: 6.18.39 +Version: 6.18.40 %if 0%{?is_kotd} -Release: <RELEASE>.ga451fc6 +Release: <RELEASE>.gced0b56 %else Release: 0 %endif ++++++ kernel-source-longterm.spec ++++++ --- /var/tmp/diff_new_pack.ZKzI1q/_old 2026-07-28 17:49:52.459614269 +0200 +++ /var/tmp/diff_new_pack.ZKzI1q/_new 2026-07-28 17:49:52.463614409 +0200 @@ -17,8 +17,8 @@ %define srcversion 6.18 -%define patchversion 6.18.39 -%define git_commit a451fc682fdebd4acac24471de2d126313623467 +%define patchversion 6.18.40 +%define git_commit ced0b56c4d8cbd409eb8f683b5773f330c91cbed %define variant -longterm%{nil} %define gcc_package gcc %define gcc_compiler gcc @@ -28,9 +28,9 @@ %(chmod +x %_sourcedir/{guards,apply-patches,check-for-config-changes,group-source-files.pl,split-modules,modversions,kabi.pl,arch-symbols,check-module-license,splitflist,mergedep,moddep,modflist,kernel-subpackage-build}) Name: kernel-source-longterm -Version: 6.18.39 +Version: 6.18.40 %if 0%{?is_kotd} -Release: <RELEASE>.ga451fc6 +Release: <RELEASE>.gced0b56 %else Release: 0 %endif ++++++ kernel-syms-longterm.spec ++++++ --- /var/tmp/diff_new_pack.ZKzI1q/_old 2026-07-28 17:49:52.519616367 +0200 +++ /var/tmp/diff_new_pack.ZKzI1q/_new 2026-07-28 17:49:52.519616367 +0200 @@ -16,15 +16,15 @@ # -%define git_commit a451fc682fdebd4acac24471de2d126313623467 +%define git_commit ced0b56c4d8cbd409eb8f683b5773f330c91cbed %define variant -longterm%{nil} %include %_sourcedir/kernel-spec-macros Name: kernel-syms-longterm -Version: 6.18.39 +Version: 6.18.40 %if 0%{?is_kotd} -Release: <RELEASE>.ga451fc6 +Release: <RELEASE>.gced0b56 %else Release: 0 %endif ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.ZKzI1q/_old 2026-07-28 17:49:52.815626718 +0200 +++ /var/tmp/diff_new_pack.ZKzI1q/_new 2026-07-28 17:49:52.819626857 +0200 @@ -1,6 +1,6 @@ -mtime: 1784613926 -commit: 17550b5142028fe5ea0f8873441b423b3c728ab35b1512fda6cb82e0584813ab +mtime: 1785045895 +commit: b285b41df9c20c7ea03fc92300dcce7943c5e803f7dc872a93d15cb44632e4d3 url: https://src.opensuse.org/kernelbugs/kernel-source-longterm -revision: 17550b5142028fe5ea0f8873441b423b3c728ab35b1512fda6cb82e0584813ab +revision: b285b41df9c20c7ea03fc92300dcce7943c5e803f7dc872a93d15cb44632e4d3 trackingbranch: Kernel/slowroll ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-26 08:04:55.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ patches.kernel.org.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/kernel-source-longterm/patches.kernel.org.tar.bz2 /work/SRC/openSUSE:Factory/.kernel-source-longterm.new.2004/patches.kernel.org.tar.bz2 differ: char 11, line 1 ++++++ patches.suse.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch new/patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch --- old/patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch 2026-07-06 09:30:11.000000000 +0200 +++ new/patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch 1970-01-01 01:00:00.000000000 +0100 @@ -1,40 +0,0 @@ -From add2b70038bea194bcdef8a680f9153ee7f93ac0 Mon Sep 17 00:00:00 2001 -From: Georgia Garcia <[email protected]> -Date: Thu, 28 May 2026 16:04:12 -0300 -Subject: [PATCH] apparmor: don't audit files pointing to aa_null.dentry -References: bsc#1259668 -Patch-mainline: Queued in subsystem maintainer repository -Git-repo: https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor.git -Git-commit: add2b70038bea194bcdef8a680f9153ee7f93ac0 - -In - commit 4a134723f9f1 ("apparmor: move check for aa_null file to cover all cases") -there was a change to not audit files pointing to -aa_null.dentry because they provide no value, but setting the error -variable instead of returning -EACCES was still causing them to be -audited. - -Fixes: 4a134723f9f1 ("apparmor: move check for aa_null file to cover all cases") -Acked-by: David Disseldorp <[email protected]> -Signed-off-by: Georgia Garcia <[email protected]> -Signed-off-by: John Johansen <[email protected]> ---- - security/apparmor/file.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/security/apparmor/file.c b/security/apparmor/file.c -index 694e157149e85..fc5abd5473c85 100644 ---- a/security/apparmor/file.c -+++ b/security/apparmor/file.c -@@ -157,7 +157,7 @@ static int path_name(const char *op, const struct cred *subj_cred, - - /* don't reaudit files closed during inheritance */ - if (unlikely(path->dentry == aa_null.dentry)) -- error = -EACCES; -+ return -EACCES; - else - error = aa_path_name(path, flags, buffer, name, &info, - labels_profile(label)->disconnected); --- -2.51.0 - diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch new/patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch --- old/patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch 2026-07-06 09:30:11.000000000 +0200 +++ new/patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch 1970-01-01 01:00:00.000000000 +0100 @@ -1,98 +0,0 @@ -From bcd1b34c21748531a3febaf7440632b89d8deab7 Mon Sep 17 00:00:00 2001 -From: Maciek Borzecki <[email protected]> -Date: Fri, 8 May 2026 10:30:16 +0200 -Subject: [PATCH] apparmor: fix uninitialised pointer passed to - audit_log_untrustedstring() -References: bsc#1259668 -Patch-mainline: Queued in subsystem maintainer repository -Git-repo: https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor.git -Git-commit: bcd1b34c21748531a3febaf7440632b89d8deab7 - -Commit 4a134723f9f1 ("apparmor: move check for aa_null file to cover all cases") -intrdouced a small bug, where path_name() may pass a potentially uninitialized -*name to aa_audit_file() if the path->dentry had been replaced with -aa_null.dentry earlier on. This can lead to page fault like one observed on -7.0.2 openSUSE Tumbleweed kernel: - -[51692.242756] [ T24690] BUG: unable to handle page fault for address: 0000000f00000003 -[51692.242762] [ T24690] #PF: supervisor read access in kernel mode -[51692.242763] [ T24690] #PF: error_code(0x0000) - not-present page -[51692.242765] [ T24690] PGD 0 P4D 0 -[51692.242768] [ T24690] Oops: Oops: 0000 [#1] SMP NOPTI -[51692.242772] [ T24690] CPU: 3 UID: 1020 PID: 24690 Comm: snap-confine Tainted: G O 7.0.2-1-default #1 PREEMPT(full) openSUSE Tumbleweed ab90b4c9940707f9cafa19bdad80b2cec52dbe51 -[51692.242775] [ T24690] Tainted: [O]=OOT_MODULE -[51692.242777] [ T24690] Hardware name: Framework Laptop 13 (AMD Ryzen 7040Series)/FRANMDCP05, BIOS 03.18 01/08/2026 -[51692.242778] [ T24690] RIP: 0010:strlen+0x4/0x30 -[51692.242783] [ T24690] Code: f7 75 ec 31 c0 e9 17 9f 00 ff 48 89 f8 e9 0f 9f 00 ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <80> 3f 00 74 18 48 89 f8 0f 1f 40 00 48 83 c0 01 80 38 00 75 f7 48 -[51692.242785] [ T24690] RSP: 0018:ffffd015eb1e3608 EFLAGS: 00010282 -[51692.242787] [ T24690] RAX: 0000000000000000 RBX: ffff89796198a360 RCX: 0000000000000000 -[51692.242788] [ T24690] RDX: 00000000000000d1 RSI: 0000000f00000003 RDI: 0000000f00000003 -[51692.242790] [ T24690] RBP: ffffffffb7ede090 R08: 00000000000005f5 R09: 0000000000000000 -[51692.242791] [ T24690] R10: 0000000000000000 R11: 0000000000000000 R12: ffffd015eb1e3700 -[51692.242792] [ T24690] R13: ffff8977a22bc380 R14: ffffffffb7ec5190 R15: ffff8977a0c8aa80 -[51692.242794] [ T24690] FS: 0000000000000000(0000) GS:ffff897f640d8000(0000) knlGS:0000000000000000 -[51692.242796] [ T24690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 -[51692.242797] [ T24690] CR2: 0000000f00000003 CR3: 00000006ad15f000 CR4: 0000000000f50ef0 -[51692.242799] [ T24690] PKRU: 55555554 -[51692.242800] [ T24690] Call Trace: -[51692.242802] [ T24690] <TASK> -[51692.242804] [ T24690] audit_log_untrustedstring+0x1d/0x40 -[51692.242811] [ T24690] common_lsm_audit+0x71/0x1d0 -[51692.242816] [ T24690] aa_audit+0x5a/0x170 -[51692.242819] [ T24690] aa_audit_file+0x18a/0x1b0 -[51692.242825] [ T24690] path_name+0xd2/0x100 -[51692.242829] [ T24690] profile_path_perm.part.0+0x58/0xb0 -[51692.242832] [ T24690] aa_path_perm+0xef/0x150 -[51692.242837] [ T24690] apparmor_file_open+0x153/0x2e0 -[51692.242840] [ T24690] security_file_open+0x46/0xd0 -[51692.242844] [ T24690] do_dentry_open+0xe9/0x4d0 -[51692.242848] [ T24690] vfs_open+0x30/0x100 - -While here, initialise variables which are passed down to path_name(). - -Fixes: 4a134723f9f1 ("apparmor: move check for aa_null file to cover all cases") -Signed-off-by: Maciek Borzecki <[email protected]> -Signed-off-by: John Johansen <[email protected]> -Acked-by: David Disseldorp <[email protected]> ---- - security/apparmor/file.c | 10 +++++----- - 1 file changed, 5 insertions(+), 5 deletions(-) - -diff --git a/security/apparmor/file.c b/security/apparmor/file.c -index fc5abd5473c85..c9d55fe1086f9 100644 ---- a/security/apparmor/file.c -+++ b/security/apparmor/file.c -@@ -158,9 +158,9 @@ static int path_name(const char *op, const struct cred *subj_cred, - /* don't reaudit files closed during inheritance */ - if (unlikely(path->dentry == aa_null.dentry)) - return -EACCES; -- else -- error = aa_path_name(path, flags, buffer, name, &info, -- labels_profile(label)->disconnected); -+ -+ error = aa_path_name(path, flags, buffer, name, &info, -+ labels_profile(label)->disconnected); - if (error) { - fn_for_each_confined(label, profile, - aa_audit_file(subj_cred, -@@ -250,7 +250,7 @@ static int profile_path_perm(const char *op, const struct cred *subj_cred, - struct path_cond *cond, int flags, - struct aa_perms *perms) - { -- const char *name; -+ const char *name = NULL; - int error; - - if (profile_unconfined(profile)) -@@ -328,7 +328,7 @@ static int profile_path_link(const struct cred *subj_cred, - struct path_cond *cond) - { - struct aa_ruleset *rules = profile->label.rules[0]; -- const char *lname, *tname = NULL; -+ const char *lname = NULL, *tname = NULL; - struct aa_perms lperms = {}, perms; - const char *info = NULL; - u32 request = AA_MAY_LINK; --- -2.51.0 - ++++++ series.conf ++++++ ++++ 1639 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/kernel-source-longterm/series.conf ++++ and /work/SRC/openSUSE:Factory/.kernel-source-longterm.new.2004/series.conf ++++++ source-timestamp ++++++ --- /var/tmp/diff_new_pack.ZKzI1q/_old 2026-07-28 17:49:54.143673155 +0200 +++ /var/tmp/diff_new_pack.ZKzI1q/_new 2026-07-28 17:49:54.151673435 +0200 @@ -1,4 +1,4 @@ -2026-07-20 22:31:34 +0000 -GIT Revision: a451fc682fdebd4acac24471de2d126313623467 +2026-07-24 17:14:25 +0000 +GIT Revision: ced0b56c4d8cbd409eb8f683b5773f330c91cbed GIT Branch: slowroll
